Skip to content
OpenAdvisories
Unscored CVE-2020-25392 EUVD-2020-18079GHSA-798j-7vcc-pxg4

A cross site scripting (XSS) vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload…

Published Jul 9, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

A cross site scripting (XSS) vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Article' field under the 'Article' plugin.

References