CVE-2020-24992

There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when an administrator accesses the content management module.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2021-05-17

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Cmswing (Cmswing)

References

• https://github.com/arterli/CmsWing/issues/54