2020-01-04

2020-01-05

2020-01-06

All (2) Medium (2)

CVE-2020-5306 Jan 05, 23:15 MEDIUM POC This Month

Codoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Codoforum Codologic

NVD Exploit-DB

CVSS 3.1

4.8

EPSS

1.1%

CVE-2020-5305 Jan 05, 23:15 MEDIUM POC This Month

Codoforum 4.8.3 allows XSS in the admin dashboard via a name field of a new user, i.e., on the Manage Users screen. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Codoforum Codologic

NVD

CVSS 3.1

4.8

EPSS

0.6%