CVE-2020-14988

An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2

published March 11, 2021

CVSS
—
EPSS
1%
Percentile
48.1
In the wild
Unconfirmed
What it is

An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows XSS in the login page via the loginmessage parameter, the text editor via the src attribute of HTML elements, the translations menu via the foldername parameter, the author page via the link URL, or the upload image functionality via an SVG document containing JavaScript.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00599 · 48.1th percentile
Published
2021-03-11T18:07Z
EPSS history
Timeline
  • 11 MAR 18:07Z
    An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2
    cvelistv5