2 matches found
CVE-2020-28047
AudimexEE before 14.1.1 is vulnerable to Reflected XSS Cross-Site-Scripting. If the recommended security configuration parameter "uniqueerrornumbers" is not set, remote attackers can inject arbitrary web script or HTML via 'action, cargo, panel' parameters that can lead to data leakage...
5.4AI score0.00845EPSS
SaveExploits1References1
CVE-2020-28047: Improper Neutralization of Input During Web Page Generation
AudimexEE before 14.1.1 is vulnerable to Reflected XSS Cross-Site-Scripting. If the recommended security configuration parameter "uniqueerrornumbers" is not set, remote attackers can inject arbitrary web script or HTML via 'action, cargo, panel' parameters that can lead to data leakage...
5.4CVSS6AI score0.00845EPSS
SaveExploits1References2
20