CVE-2020-23719

Cross site scripting (XSS) vulnerability in application/controllers/AdminController.php in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the bbsmeta parameter.

Score

CVSS 3.1 9.6 Critical

Status

Modified - cve@mitre.org

Published

2021-11-02

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Zibbs (Zibbs Project)

References

• https://github.com/xujinliang/zibbs/issues/5