CVE-2020-24912

A reflected cross-site scripting (XSS) vulnerability in qcubed (all versions including 3.1.1) in profile.php via the stQuery-parameter allows unauthenticated…

published March 4, 2021

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

A reflected cross-site scripting (XSS) vulnerability in qcubed (all versions including 3.1.1) in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06340 · 93.6th percentile
Published
2021-03-04T12:30Z
EPSS history
Timeline
  • 04 MAR 12:30Z
    A reflected cross-site scripting (XSS) vulnerability in qcubed (all versions including 3.1.1) in profile.php via the stQuery-parameter allows unauthenticated…
    cvelistv5