CVE-2020-25879 - A stored cross site scripting (XSS) vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Username' parameter

Back Back to CVE browser

MEDIUM

A stored cross site scripting (XSS) vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Username' parameter

Published Jul 9, 2021

5.4

MEDIUM

CVSS 3.1

EPSS 0.45%

Description

A stored cross site scripting (XSS) vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Username' parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://codoforum.com/
x_refsource_MISCProduct
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-18511
Advisory
https://github.com/r0ck3t1973/xss_payload/issues/5
x_refsource_MISCExploitIssue TrackingThird Party Advisory

Link	Providers	Tags
https://codoforum.com/		x_refsource_MISCProduct
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-18511		Advisory
https://github.com/r0ck3t1973/xss_payload/issues/5		x_refsource_MISCExploitIssue TrackingThird Party Advisory