Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1) className and !2) Description fields in index.php/Admin/Classes,
References
Link | Resource |
---|---|
http://www.typesettercms.com | Vendor Advisory |
http://blog.topsec.com.cn/typesetter-5-1-storage-type-cross-site-script/ | Exploit Third Party Advisory |
Configurations
Information
Published : 2021-06-21 12:15
Updated : 2021-06-24 12:21
NVD link : CVE-2020-19511
Mitre link : CVE-2020-19511
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
typesettercms
- typesetter