CVE-2020-26680

In vFairs 3.3, any user logged in to a vFairs virtual conference or event can modify any other users profile information to include a cross-site scripting…

published May 26, 2021

CVSS
—
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

In vFairs 3.3, any user logged in to a vFairs virtual conference or event can modify any other users profile information to include a cross-site scripting payload. The user data stored by the database includes HTML tags that are intentionally rendered out onto the page, and this can be abused to perform XSS attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00460 · 38.8th percentile
Published
2021-05-26T11:54Z
EPSS history
Timeline
  • 26 MAY 11:54Z
    In vFairs 3.3, any user logged in to a vFairs virtual conference or event can modify any other users profile information to include a cross-site scripting…
    cvelistv5