CVE-2020-15864

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p51

Published

Jan 17, 2021 (Jan 17, 2021)

Modified

Jun 17, 2026

Description

An issue was discovered in Quali CloudShell 9.3. An XSS vulnerability in the login page allows an attacker to craft a URL, with a constructor.constructor substring in the username field, that executes a payload when the user visits the /Account/Login page.

Vendors: quali
Products: cloudshell
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.