CVE-2020-14014

An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. The query parameter fid on the resource navigate.php does not perform sufficient data validation and/or encoding, making it vulnerable to reflected XSS.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2020-06-24

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Navigate Cms (Naviwebs)

References

• https://blog.sean-wright.com/navigate-cms/
• https://cxsecurity.com/issue/WLB-2018090182