CVE-2020-7051

Codologic Codoforum is affected up to version 4.8.4 by a stored XSS in the login area. The root cause cited across sources is input handling that allows script execution, with an additional note that session cookies lack the HttpOnly flag, contributing to potential account takeover when an attack...