CVE-2020-5842

Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI

published January 7, 2020

CVSS
—
EPSS
2%
Percentile
78.5
In the wild
Unconfirmed
What it is

Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. The payload is, for example, executed on the admin/index.php?page=users/manage page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01816 · 78.5th percentile
Published
2020-01-07T19:17Z
EPSS history
Timeline
  • 07 JAN 19:17Z
    Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI
    cvelistv5