2 matches found
CVE-2020-20977
A stored cross site scripting XSS vulnerability in index.php/legend/6.html of UK CMS v1.1.10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Comments section...
5.4CVSS0.00503EPSS
SaveExploits1References1
CVE-2020-20977: Improper Neutralization of Input During Web Page Generation
A stored cross site scripting XSS vulnerability in index.php/legend/6.html of UK CMS v1.1.10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Comments section...
5.4CVSS5.6AI score0.00503EPSS
SaveExploits1References2
20