medium6.1
CVE-2020-19157
Cross Site Scripting (CSS) in Wenku CMS v3.4 allows remote attackers to execute arbitrary code via the 'Intro' parameter for the component '/index.php?m=ucente…
Impact
Cross Site Scripting (CSS) in Wenku CMS v3.4 allows remote attackers to execute arbitrary code via the 'Intro' parameter for the component '/index.php?m=ucenter&a=index'.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wenkucms Project | Wenkucms | Version 3.4 |