4 matches found
CVE-2020-6956
PCS DEXICON 3.4.1 allows XSS via the loginName parameter in loginaction.jsp...
6.1CVSS6AI score0.007EPSS
SaveExploits1References1
Cross site scripting
PCS DEXICON 3.4.1 allows XSS via the loginName parameter in loginaction.jsp...
4.3CVSS5.9AI score0.007EPSS
SaveExploits1References1Affected Software1
CVE-2020-6956
PCS DEXICON 3.4.1 allows XSS via the loginName parameter in loginaction.jsp...
6AI score0.007EPSS
SaveExploits1References1
CVE-2020-6956
CVE-2020-6956 concerns PCS DEXICON 3.4.1, where a Cross-Site Scripting (XSS) vulnerability exists in the loginName parameter of login_action.jsp. The root cause, per CNVD, is inadequate validation of client-side data by the WEB application, enabling execution of client-side code. Documented impac...
6.1CVSS5.9AI score0.007EPSS
SaveExploits1References1Affected Software1
20