Skip to content
OpenAdvisories
Medium · 6.1 CVE-2020-21052 EUVD-2020-13831GHSA-h3xp-rv2j-px7g

Cross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote attacker to execute arbitrary code via the nickame parameter of t…

Published Jun 20, 2023 · Updated Dec 10, 2024 · Assigned by mitre

Description

Cross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote attacker to execute arbitrary code via the nickame parameter of the /post/addComment function.

References