CVE-2020-14042

** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) vulnerability was found in Codiad v1.7.8 and later

published August 25, 2020

CVSS
—
EPSS
1%
Percentile
67.2
In the wild
Unconfirmed
What it is

** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) vulnerability was found in Codiad v1.7.8 and later. The vulnerability occurs because of improper sanitization of the folder's name $path variable in components/filemanager/class.filemanager.php. NOTE: the vendor states "Codiad is no longer under active maintenance by core contributors."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01172 · 67.2th percentile
Published
2020-08-25T14:43Z
EPSS history
Timeline
  • 25 AUG 14:43Z
    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) vulnerability was found in Codiad v1.7.8 and later
    cvelistv5