CVE-2020-15803

Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget

published July 17, 2020

CVSS
—
EPSS
32%
Percentile
98.3
In the wild
Unconfirmed
What it is

Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.32304 · 98.3th percentile
Published
2020-07-17T00:00Z
EPSS history
Timeline
  • 17 JUL 00:00Z
    Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget
    cvelistv5