CVE-2020-18282 - Cross-site scripting (XSS) vulnerability in NoneCms 1.3.0 allows remote attackers to inject arbitrary web script or HTML via feedback feature

MEDIUM

Cross-site scripting (XSS) vulnerability in NoneCms 1.3.0 allows remote attackers to inject arbitrary web script or HTML via feedback feature

Published May 8, 2023

6.1

MEDIUM

CVSS 3.1

EPSS 0.52%

Cross-site scripting (XSS) vulnerability in NoneCms 1.3.0 allows remote attackers to inject arbitrary web script or HTML via feedback feature.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-10209		Advisory
https://github.com/nangge/noneCms		Product
https://github.com/nangge/noneCms/issues/23		ExploitIssue Tracking

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 8, 2023

Updated Jan 29, 2025

Reserved Aug 13, 2020

CISA Vulnrichment

Updated Jan 29, 2025

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published May 8, 2023

Updated Jan 29, 2025

GitHub

No data