Reflected Cross Site Scripting in Wuzhicms 4.1.0
CVE-2020-19897

6.1MEDIUM

Key Information:

Vendor

Wuzhicms

Status
Wuzhi Cms
Vendor
CVE Published:
28 June 2022

What is CVE-2020-19897?

A reflected Cross Site Scripting (XSS) vulnerability exists in Wuzhicms version 4.1.0. It allows remote attackers to inject and execute arbitrary web scripts or HTML code through the manipulation of the imgurl parameter. This can lead to various attacks, including data theft or session hijacking, posing significant security risks for users and systems.

References

https://github.com/wuzhicms/wuzhicms/issues/183
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.