CVE-2020-18404

CVE-2020-18404 affects espcms version P8.18101601. Multiple connected sources (NVD, RH, CNNVD, PRION, etc.) confirm a cross-site scripting (XSS) vulnerability that allows arbitrary code execution via the title parameter. The root cause is an input handling flaw in the title field leading to scrip...