ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-18022”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-18022
Published
2021-04-28
CVSS:
6.1
ShadowTrackr CVSS:
0.5
Summary:
Cross Site Scripting (XSS) in Qibosoft QiboCMS v7 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information by injecting arbitrary commands in a HTTP request to the "ewebeditor\3.1.1\kindeditor.js" component.