CVE-2020-20344 WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the keyword search function under the background articles module.
MediumCVSS 5.4
EPSS 0.50%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the keyword search function under the background articles module.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wtcms project wtcms | = 1.0 | No fix listed |
References
- github.com exploit issue-tracking third-party-advisory