Cross Site Scripting Vulnerability in CSZ CMS by Cloud Services Zone
CVE-2020-25391

5.4MEDIUM

Key Information:

Vendor

Cszcms

Status
Csz Cms
Vendor
CVE Published:
9 July 2021

What is CVE-2020-25391?

A Cross Site Scripting (XSS) vulnerability exists in version 1.2.9 of CSZ CMS that enables attackers to inject and execute arbitrary web scripts or HTML. This can occur when a malicious payload is entered into the 'New Pages' field under the 'Pages Content' module, potentially leading to unauthorized access and control over user sessions.

References

https://sourceforge.net/p/cszcms/tickets/1/
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2020-25391 : Cross Site Scripting Vulnerability in CSZ CMS by Cloud Services Zone