CVE-2020-26563

ObjectPlanet Opinio before 7.14 allows reflected XSS via the survey/admin/surveyAdmin.do?action=viewSurveyAdmin query string

published July 30, 2021

CVSS
—
EPSS
1%
Percentile
62.0
In the wild
Unconfirmed
What it is

ObjectPlanet Opinio before 7.14 allows reflected XSS via the survey/admin/surveyAdmin.do?action=viewSurveyAdmin query string. (There is also stored XSS if input to survey/admin/*.do is accepted from untrusted users.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00984 · 62.0th percentile
Published
2021-07-30T02:52Z
EPSS history
Timeline
  • 30 JUL 02:52Z
    ObjectPlanet Opinio before 7.14 allows reflected XSS via the survey/admin/surveyAdmin.do?action=viewSurveyAdmin query string
    cvelistv5