CVE-2020-18280 - Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the EMBED SRC function

MEDIUM

Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the EMBED SRC function

Published May 9, 2023

6.1

MEDIUM

CVSS 3.1

EPSS 0.43%

Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the EMBED SRC function.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-10207		Advisory
https://github.com/phodal/md/issues/20		ExploitIssue Tracking

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published May 9, 2023

Updated Jan 29, 2025

Reserved Aug 13, 2020

Updated Jan 29, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published May 9, 2023

Updated Jan 29, 2025

Exploited since n/a