ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-18132

PoC —
CVSS 3.1
4.8 medium
EPSS
<1%p33
Published
()
Modified
Description

Cross Site Scripting (XSS) vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit.

Vendors
mipcms
Products
mipcms
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

No ingested article mentions this CVE yet.