critical9.8
CVE-2020-7675
cd-messenger through 2.7.26 is vulnerable to Arbitrary Code Execution.
Impact
cd-messenger through 2.7.26 is vulnerable to Arbitrary Code Execution. User input provided to the `color` argument executed by the `eval` function resulting in code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cd-Messenger Project | Cd-Messenger | through 2.7.26 |