medium6.1
CVE-2020-23327
Cross Site Scripting vulnerability found in ZblogCN ZblogPHP v.1.0 allows a local attacker to execute arbitrary code via a crafted payload in title parameter o…
Impact
Cross Site Scripting vulnerability found in ZblogCN ZblogPHP v.1.0 allows a local attacker to execute arbitrary code via a crafted payload in title parameter of the module management model.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zblogcn | Zblogphp | Version 1.0 |