medium4.8
CVE-2020-18455
Cross Site Scripting (XSS) vulnerability exists in bycms v3.0.4 via the title parameter in the edit function in Document.php.
Impact
Cross Site Scripting (XSS) vulnerability exists in bycms v3.0.4 via the title parameter in the edit function in Document.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bycms Project | Bycms | Version 1.3.0 |