medium5.4
CVE-2020-14014
An issue was discovered in Navigate CMS 2.8 and 2.9 r1433.
Impact
An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. The query parameter fid on the resource navigate.php does not perform sufficient data validation and/or encoding, making it vulnerable to reflected XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Naviwebs | Navigate Cms | Versions 2.8, 2.9 |