medium5.4
CVE-2020-21101
Cross Site Scriptiong vulnerabilityin Screenly screenly-ose all versions, including v1.8.2 (2019-09-25-Screenly-OSE-lite.img), in the 'Add Asset' page via mani…
Impact
Cross Site Scriptiong vulnerabilityin Screenly screenly-ose all versions, including v1.8.2 (2019-09-25-Screenly-OSE-lite.img), in the 'Add Asset' page via manipulation of a 'URL' field, which could let a remote malicious user execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Screenly | Screenly | Versions 0.9, 0.9.1, 0.10, 0.11, 0.12, 0.12.1 |