medium5.4
CVE-2020-18693
Cross Site Scripting (XSS) in MineWebCMS v1.7.0 allows remote attackers to execute arbitrary code by injecting malicious code into the 'Title' field of the com…
Impact
Cross Site Scripting (XSS) in MineWebCMS v1.7.0 allows remote attackers to execute arbitrary code by injecting malicious code into the 'Title' field of the component '/admin/news'.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mineweb | Minewebcms | Version 1.7.0 |