Skip to content
OpenAdvisories
Unscored CVE-2020-25470 EUVD-2020-18156GHSA-9mhr-wj86-g462

AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion. When viewing an added site, an XSS payload c…

Published Oct 26, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code execution.

References