CVE-2020-16270

CVE-2020-16270 affects OLIMPOKS v3.3.39 and involves an Auth/Admin ErrorMessage XSS that enables a remote attacker to inject JavaScript in vulnerable applications. The vulnerability stems from improper handling/validation of the ErrorMessage parameter, allowing script execution in the victim’s br...