CVE-2020-28141

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body

published April 19, 2021

CVSS
—
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00604 · 48.3th percentile
Published
2021-04-19T15:45Z
EPSS history
Timeline
  • 19 APR 15:45Z
    The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body
    cvelistv5