codologic.com
http://codologic.com/forum/index.php?u=/category/news-and-announcements CVE-2020-5306
MEDIUM
Codoforum 4.8.3 - 'input_txt' Persistent Cross-Site Scripting
Record summary
CVE-2020-5306 has a selected CVSS score of 4.8 (medium); EIP currently links 1 catalogued exploit.
Description
Codoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBCodoforum 4.8.3 - 'input_txt' Persistent Cross-Site ScriptingExploitDB exploitby Vyshnav nkNot analyzed1 file
References
4nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-5306 vyshnavvizz.blogspot.com
https://vyshnavvizz.blogspot.com/2020/01/stored-cross-site-scripting-in.html exploit-db.com
https://www.exploit-db.com/exploits/47886