CVE-2020-20345

Published September 1st, 2021

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

3.5

LOW

Affected

PROJECT

Description

WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box.

taosir/wtcms

基于thinkphp的内容管理系统，可快速搭建个人博客、公司学校官网、新闻类站点。

GitHub

113