Codoforum 4.8.3 allows HTML Injection in the 'admin dashboard Manage users Section.'
References
Link | Resource |
---|---|
https://codoforum.com/ | Vendor Advisory |
https://vyshnavvizz.blogspot.com/2020/01/html-injection-in-codoforum-v483.html | Exploit Third Party Advisory |
Configurations
History
No history.
Information
Published : 2020-09-14 18:15
Updated : 2024-02-28 17:47
NVD link : CVE-2020-21845
Mitre link : CVE-2020-21845
CVE.ORG link : CVE-2020-21845
JSON object : View
Products Affected
codoforum
- codoforum
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')