3 matches found
Cross site scripting
Cross Site Scripting XSS vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php...
3.5CVSS4.9AI score0.00527EPSS
SaveExploits1References1Affected Software1
CVE-2020-18451
Cross Site Scripting XSS vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php...
5AI score0.00527EPSS
SaveExploits1References1
CVE-2020-18451
CVE-2020-18451 is an XSS vulnerability in DamiCMS v6.0.6, arising from an unsanitized input of the title parameter in the doadd function of LabelAction.class.php. Affects the web app’s ability to handle user-supplied titles, enabling cross-site scripting. NVD reports CVSSv3.1 base score 4.8 (MEDI...
4.8CVSS4.9AI score0.00527EPSS
SaveExploits1References1Affected Software1
20