CVE-2020-19884

MEDIUM 4.8EPSS 0.7%

DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function in dbhcms\mod\mod.domain.edit.php line 119.

CVSS v3.1: 4.8 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CVSS v2.0: 3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
EPSS: 0.68% chance of exploitation in the next 30 days, 50th percentile
Published: 2020-08-24
Updated: 2024-08-04

Proof-of-concept exploits (1)

fragrant10/cve/tree/master/dbhcms1.2.0#8

References

Related