Description

Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution via the plugin name input field in the plugin module.

Remediation

References

CVE-2020-22841

Related Vulnerabilities

PHP CVE-2004-1064 Vulnerability (CVE-2004-1064)

WordPress Plugin Flexible Captcha Security Bypass (4.0)

WordPress Plugin Slideshow Gallery LITE Unspecified Vulnerability (1.7.4.2)

OpenSSL Other Vulnerability (CVE-2003-0543)

WordPress Plugin Process Steps Template Designer Cross-Site Request Forgery (1.2.1)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2020-22841