DBHcms Cross-Site Scripting Vulnerability

DBHcms is a small PHP open source content management system. A cross-site scripting vulnerability exists in version 1.2.0 of DBHcms, which stems from a lack of proper validation of client-side data in the web application. An attacker can exploit this vulnerability to execute client-side code...

CVE-2020-19881

DBHcms v1.2.0 has a reflected xss vulnerability as there is no security filter in dbhcms\mod\mod.selector.php line 108 for $GET'returnname' parameter, A remote authenticated with admin user can exploit this vulnerability to hijack other users...