medium5.4
CVE-2020-20946
Qibosoft v7 contains a stored cross-site scripting (XSS) vulnerability in the component /admin/index.php?lfj=friendlink&action=add.
Impact
Qibosoft v7 contains a stored cross-site scripting (XSS) vulnerability in the component /admin/index.php?lfj=friendlink&action=add.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qibosoft | Qibosoft | Version 7.0 |