CVE-2020-23643

CVE-2020-23643 affects JIZHICMS 1.7.1. The XSS is triggered in Home/c/WechatController.php via index.php/Wechat/checkWeixin?signature=1&echostr={XSS], as reported across multiple sources (NVD, Red Hat, CNVD, OSV). Impact described as injection of arbitrary script/HTML in the browser. CVSS data: C...