CVE-2020-18165

MEDIUM

laobancms v2.0 - Stored Cross-Site Scripting via Website SEO Keywords Field

Title source: llm
STIX 2.1

Description

Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO Keywords" field on the page "admin/info.php?shuyu".

References (1)

Core 1
Core References

Scores

CVSS v3 4.8
EPSS 0.0091
EPSS Percentile 55.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
laobancms/laobancms 2.0
Published May 12, 2021
Tracked Since Feb 18, 2026