CVE-2020-29477

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Invision Community 4.5.4 - 'Field Name' Stored Cross-Site Scripting2020-12-03 · webapps · multiple

Impact

Invision Community 4.5.4 is affected by cross-site scripting (XSS) in the Field Name field. This vulnerability can allow an attacker to inject the XSS payload in Field Name and each time any user will open that, the XSS triggers and the attacker can able to steal the cookie according to the crafted payload.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://www.exploit-db.com/exploits/49188
• https://www.exploit-db.com/exploits/49188