4 matches found
CVE-2020-19515
qdPM V9.1 is vulnerable to Cross Site Scripting XSS via qdPM\install\modules\databaseconfig.php...
6.1CVSS0.01789EPSS
SaveExploits1References1
Cross site scripting
qdPM V9.1 is vulnerable to Cross Site Scripting XSS via qdPM\install\modules\databaseconfig.php...
4.3CVSS5.9AI score0.01789EPSS
SaveExploits1References1Affected Software1
CVE-2020-19515
qdPM 9.1 is vulnerable to Cross-Site Scripting via qdPM\install\modules\database_config.php. The root cause is insufficient validation of user-supplied data in that configuration file, enabling injection of malicious scripts into pages viewed by users. Impact could include data theft, session hij...
6.1CVSS5.9AI score0.01789EPSS
SaveExploits1References1Affected Software1
20