Codologic Codoforum through 4.8.4 allows stored XSS in the login area
published February 13, 2020
CVSS
—
EPSS
1%
Percentile
54.7
In the wild
Unconfirmed
What it is
Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeover.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00757 · 54.7th percentile
Published
2020-02-13T15:43Z
EPSS history
Timeline
13 FEB 15:43Z
Codologic Codoforum through 4.8.4 allows stored XSS in the login area