CVE-2020-18475

Cross Site Scripting (XSS) vulnerabilty exists in Hucart CMS 5.7.4 is via the mes_title field

published August 26, 2021

CVSS
—
EPSS
0%
Percentile
38.1
In the wild
Unconfirmed
What it is

Cross Site Scripting (XSS) vulnerabilty exists in Hucart CMS 5.7.4 is via the mes_title field. The first user inserts a malicious script into the header field of the outbox and sends it to other users. When other users open the email, the malicious code will be executed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00450 · 38.1th percentile
Published
2021-08-26T17:28Z
EPSS history
Timeline
  • 26 AUG 17:28Z
    Cross Site Scripting (XSS) vulnerabilty exists in Hucart CMS 5.7.4 is via the mes_title field
    cvelistv5