medium4.8
CVE-2020-18132
Cross Site Scripting (XSS) vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit.
Impact
Cross Site Scripting (XSS) vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mipcms | Mipcms | Version 3.6.0 |