Lucene search
Veracode Vulnerability DatabaseVERACODE:25688HistoryJun 16, 2020 - 4:20 a.m.
Cross-Site Scripting (XSS)
2020-06-1604:20:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
21.6%
kumbia/framework is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject and execute arbitrary Javascript in a user’s browser via the PATH_INFO in the public/pages/kumbia module.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kumbia/framework | le | 1.1.1 |
Related
cve
cve
CVE-2020-14146
2020-06-15 14:15:11
osv
osv
KumbiaPHP Cross-site Scripting
2022-05-24 17:20:32
CVE-2020-14146
2020-06-15 14:15:11
cvelist
cvelist
CVE-2020-14146
2020-06-15 13:47:29
prion
prion
Design/Logic Flaw
2020-06-15 14:15:00
nvd
nvd
CVE-2020-14146
2020-06-15 14:15:11
github
github
KumbiaPHP Cross-site Scripting
2022-05-24 17:20:32