Skip to content
OpenAdvisories
Unscored CVE-2020-23371 EUVD-2020-16118GHSA-8q8m-7cq5-cxv7

Cross-site scripting (XSS) vulnerability in static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf in noneCms v1.3.0 allows rem…

Published May 10, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf in noneCms v1.3.0 allows remote attackers to inject arbitrary web script or HTML via the movieName parameter.

References