CVE-2020-6847

OpenTrade through 0.2.0 has a DOM-based XSS vulnerability that is executed when an administrator attempts to delete a message that contains JavaScript

High · published January 11, 2020

CVSS v3.0
7.6
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

OpenTrade through 0.2.0 has a DOM-based XSS vulnerability that is executed when an administrator attempts to delete a message that contains JavaScript.

The record
Technical detail
CVSS v3.0
7.6 · HIGH
Vector
CVSS:3.0/AC:L/AV:N/A:N/C:H/I:L/PR:L/S:C/UI:R
CVSS v4.0
Not supplied
EPSS
0.00927 · 60.1th percentile
Published
2020-01-11T03:46Z
EPSS history
Timeline
  • 11 JAN 03:46Z
    OpenTrade through 0.2.0 has a DOM-based XSS vulnerability that is executed when an administrator attempts to delete a message that contains JavaScript
    cvelistv5