CVE-2020-20600

MetInfo 7.0 beta contains a stored cross-site scripting (XSS) vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2021-12-22

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Metinfo (Metinfo)

References

• https://github.com/alixiaowei/cve_test/issues/2