An issue was discovered in Navigate CMS 2.8 and 2.9 r1433
published June 24, 2020
CVSS
—
EPSS
1%
Percentile
50.4
In the wild
Unconfirmed
What it is
An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. The query parameter fid on the resource navigate.php does not perform sufficient data validation and/or encoding, making it vulnerable to reflected XSS.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00649 · 50.4th percentile
Published
2020-06-24T14:22Z
EPSS history
Timeline
24 JUN 14:22Z
An issue was discovered in Navigate CMS 2.8 and 2.9 r1433