medium6.1
CVE-2020-19914
Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the attachment upload function.
Impact
Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the attachment upload function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xiuno | Xiunobbs | Version 4.0.4 |