CVE-2020-22421

74CMS v6.0.4 was discovered to contain a cross-site scripting XSS vulnerability via /index.php?m=&c=help&a=helplist&key...

Cross site scripting

74CMS v6.0.4 was discovered to contain a cross-site scripting XSS vulnerability via /index.php?m=&c=help&a=helplist&key...

CVE-2020-22421

Summary: CVE-2020-22421 affects 74CMS v6.0.4, which contains a cross-site scripting (XSS) flaw exploitable via /index.php?m=&c=help&a=help_list&key. The root cause, as described in CNVD/CNNVD records, is missing data validation/filters for user-supplied input that is subsequently output, enabling...