CVE-2020-25876 - A stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payload entered into the 'Page Title' parameter

Back Back to CVE browser

MEDIUM

A stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payload entered into the 'Page Title' parameter

Published Jul 9, 2021

5.4

MEDIUM

CVSS 3.1

EPSS 0.45%

Description

A stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payload entered into the 'Page Title' parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://codoforum.com/
x_refsource_MISCProduct
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-18508
Advisory
https://github.com/r0ck3t1973/xss_payload/issues/3
x_refsource_MISCExploitIssue TrackingThird Party Advisory

Link	Providers	Tags
https://codoforum.com/		x_refsource_MISCProduct
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-18508		Advisory
https://github.com/r0ck3t1973/xss_payload/issues/3		x_refsource_MISCExploitIssue TrackingThird Party Advisory