4 matches found
CVE-2020-25875
CVE-2020-25875 affects Codoforum v5.0.2, where a stored XSS exists in the Smileys feature. The vulnerability occurs via crafted payloads in the Smiley Code parameter, and is exploitable by authenticated attackers to execute web scripts or HTML in the context of the affected forum. The connected d...
CVE-2020-25879
CVE-2020-25879 is a stored XSS vulnerability in Codoforum v5.0.2, exploitable via the Username field in the Manage Users feature. An authenticated attacker can inject and execute arbitrary scripts/HTML. The CVSS data in the initial document shows a base score of 5.4 (CVSS‑3.1) with Network access...
CVE-2020-25876
The CVE-2020-25876 entry concerns Codoforum v5.0.2 with a stored XSS vulnerability in the Pages feature. The issue allows authenticated attackers to inject arbitrary web scripts or HTML via the Page Title parameter, implying a stored payload that could execute in victims’ browsers when loading a ...