CVE-2020-5663

XOOPS 用モジュール XooNIps における格納型 XSS (クロスサイトスクリプティング)

XooNIps 3.49 and earlier was affected by Stored Cross-Site Scripting (XSS). This allows remote attackers to execute arbitrary javascript code from victim's browser.

Disclosure Date

2020/11/06

Credit

stypr (@stereotype32)

CWE

• CWE-79

Product URLs

• https://xoonips.osdn.jp/

Reference

• https://nvd.nist.gov/vuln/detail/CVE-2020-5663
• https://jvn.jp/vu/JVNVU92053563/index.html
• https://xoonips.osdn.jp/modules/news/index.php?page=article&storyid=13