Lucene search
Veracode Vulnerability DatabaseVERACODE:25504HistoryMay 28, 2020 - 5:30 a.m.
Cross-site Scripting (XSS)
2020-05-2805:30:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
34.0%
forkcms/forkcms is vulnerable to cross-site scripting (XSS) attacks. The library doesn’t properly escape the data values provided by the user such as navigation_title and pageTitle in the function createHtml(), allowing a malicious user to inject and execute malicious web script.
| CPE | Name | Operator | Version |
|---|---|---|---|
| forkcms/forkcms | le | 5.8.2 | |
| forkcms/forkcms | le | 5.8.2 |
Related
cve
cve
CVE-2020-13633
2020-05-27 16:15:13
osv
osv
CVE-2020-13633
2020-05-27 16:15:13
Fork CMS Cross-site Scripting Vulnerability
2022-05-24 17:18:45
nvd
nvd
CVE-2020-13633
2020-05-27 16:15:13
github
github
Fork CMS Cross-site Scripting Vulnerability
2022-05-24 17:18:45
prion
prion
Design/Logic Flaw
2020-05-27 16:15:00
cvelist
cvelist
CVE-2020-13633
2020-05-27 15:04:47