CVE-2020-19626

Cross Site Scripting (XSS) vulnerability in craftcms 3.1.31, allows remote attackers to inject arbitrary web script or HTML, via /admin/settings/sites/new

published March 26, 2021

CVSS
—
EPSS
1%
Percentile
57.7
In the wild
Unconfirmed
What it is

Cross Site Scripting (XSS) vulnerability in craftcms 3.1.31, allows remote attackers to inject arbitrary web script or HTML, via /admin/settings/sites/new.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00848 · 57.7th percentile
Published
2021-03-26T14:31Z
EPSS history
Timeline
  • 26 MAR 14:31Z
    Cross Site Scripting (XSS) vulnerability in craftcms 3.1.31, allows remote attackers to inject arbitrary web script or HTML, via /admin/settings/sites/new
    cvelistv5