CVE-2020-12703

UliCMS before 2020.2 has XSS during PackageController uninstall...

EUVD-2020-4991

Malware in sbrugna...

CVE-2020-12703

UliCMS before 2020.2 has XSS during PackageController uninstall...

Design/Logic Flaw

UliCMS before 2020.2 has XSS during PackageController uninstall...

CVE-2020-12703

CVE-2020-12703 affects UliCMS prior to 2020.2, with a Cross-Site Scripting (XSS) vulnerability occurring during PackageController uninstall. Root cause cited across sources is lack of proper validation of client-side data within the web application. Impact is client-side code execution within aff...