medium4.8
CVE-2020-18451
Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.
Impact
Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Damicms | Damicms | Version 6.0.6 |