CVE-2020-22841

Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution via the plugin name input field in the plugin module...

CVE-2020-22841: Improper Neutralization of Input During Web Page Generation

Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution via the plugin name input field in the plugin module...

PT-2021-10800

Name of the Vulnerable Software and Affected Versions b2evolution CMS versions prior to 6.11.7 Description The issue allows an attacker to execute malicious JavaScript code via the plugin name input field in the plugin module. This is a Stored XSS issue. Recommendations For b2evolution CMS versio...