Skip to content
OpenAdvisories
Unscored CVE-2020-26669 EUVD-2020-19211GHSA-929g-qc9f-pm5x

A stored cross-site scripting (XSS) vulnerability was discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker t…

Published Jun 1, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

A stored cross-site scripting (XSS) vulnerability was discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to execute arbitrary web scripts or HTML via the page content to site/index.php/admin/pages/update.

References