Description
Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeover.
Unscored
CVE-2020-7051
EUVD-2020-28185GHSA-7j87-m9r6-9c5r
Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session c…
Published Feb 13, 2020 · Updated Aug 4, 2024 · Assigned by mitre