medium6.1
CVE-2020-5678
Stored cross-site scripting vulnerability in GROWI v3.8.1 and earlier allows remote attackers to inject arbitrary script via unspecified vectors.
Impact
Stored cross-site scripting vulnerability in GROWI v3.8.1 and earlier allows remote attackers to inject arbitrary script via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Weseek | Growi | through 3.8.1 |