medium6.1
CVE-2020-18259
ED01-CMS v1.0 was discovered to contain a reflective cross-site scripting (XSS) vulnerability in the component sposts.php.
Impact
ED01-CMS v1.0 was discovered to contain a reflective cross-site scripting (XSS) vulnerability in the component sposts.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Post title or Post content fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ed01-Cms Project | Ed01-Cms | Version 1.0 |