medium4.8
CVE-2020-18165
Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO Keywords" field on t…
Impact
Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO Keywords" field on the page "admin/info.php?shuyu".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Laobancms | Laobancms | Version 2.0 |