Cross-Site Scripting Vulnerability in Jalios JCMS by Jalios
CVE-2020-15497

5.3MEDIUM

Key Information:

Vendor: Jalios
Status: Jcms
Vendor: CVE Published:; 17 July 2020

What is CVE-2020-15497?

A cross-site scripting (XSS) vulnerability exists in the jcore/portal/ajaxPortal.jsp file of Jalios JCMS version 10.0.2 build-20200224104759. This vulnerability allows attackers to exploit the types parameter, potentially exposing users to malicious scripts. It is important to note that this vulnerability is not found in standard installations of Jalios JCMS, suggesting that customizations or specific configurations may introduce risks.