2 matches found
Cross site scripting
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...
3.5CVSS5.2AI score0.00549EPSS
SaveExploits1References3Affected Software1
CVE-2020-20345: Improper Neutralization of Input During Web Page Generation
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...
5.4CVSS5.7AI score0.00549EPSS
SaveExploits1References6
20