medium5.4
CVE-2020-19962
A stored cross-site scripting (XSS) vulnerability in the getClientIp function in /lib/tinwin.class.php of Chaoji CMS 2.39, allows attackers to execute arbitrar…
Impact
A stored cross-site scripting (XSS) vulnerability in the getClientIp function in /lib/tinwin.class.php of Chaoji CMS 2.39, allows attackers to execute arbitrary web scripts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chaoji Cms Project | Chaoji Cms | Version 2.39 |