CVE

CVE-2020-21494

CVE-2020-21494

A cross-site scripting (XSS) vulnerability in the component installinstall.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via changing the doctype value to 0.

Source: CVE-2020-21494

Exit mobile version