Reflected cross-site scripting vulnerability (XSS) in the evoadm.php file in b2evolution cms version 6.11.6-stable allows remote attackers to inject arbitrary webscript or HTML code via the tab3 parameter.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/161363/b2evolution-CMS-6.11.6-Cross-Site-Scripting.html | Exploit Third Party Advisory |
| https://sohambakore.medium.com/b2evolution-cms-reflected-xss-in-tab-type-parameter-in-evoadm-php-38886216cdd3 | Exploit Third Party Advisory |
| https://www.exploit-db.com/exploits/49555 | Exploit Third Party Advisory |
| http://packetstormsecurity.com/files/161363/b2evolution-CMS-6.11.6-Cross-Site-Scripting.html | Exploit Third Party Advisory |
| https://sohambakore.medium.com/b2evolution-cms-reflected-xss-in-tab-type-parameter-in-evoadm-php-38886216cdd3 | Exploit Third Party Advisory |
| https://www.exploit-db.com/exploits/49555 | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 05:13
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/161363/b2evolution-CMS-6.11.6-Cross-Site-Scripting.html - Exploit, Third Party Advisory | |
| References | () https://sohambakore.medium.com/b2evolution-cms-reflected-xss-in-tab-type-parameter-in-evoadm-php-38886216cdd3 - Exploit, Third Party Advisory | |
| References | () https://www.exploit-db.com/exploits/49555 - Exploit, Third Party Advisory |
Information
Published : 2021-02-09 20:15
Updated : 2024-11-21 05:13
NVD link : CVE-2020-22839
Mitre link : CVE-2020-22839
CVE.ORG link : CVE-2020-22839
JSON object : View
Products Affected
b2evolution
- b2evolution_cms
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')