fastadmin V1.0.0.20200506_beta contains a cross-site scripting (XSS) vulnerability which may allow an attacker to obtain administrator credentials to log in to the background.
References
Link | Resource |
---|---|
https://github.com/BigTiger2020/Fastadmin-V1.0.0.20200506_beta | Exploit Third Party Advisory |
https://github.com/karsonzhang/fastadmin | Third Party Advisory |
https://github.com/BigTiger2020/Fastadmin-V1.0.0.20200506_beta/blob/main/README.md | Exploit Third Party Advisory |
Configurations
Information
Published : 2021-02-23 09:15
Updated : 2021-03-04 12:54
NVD link : CVE-2020-26609
Mitre link : CVE-2020-26609
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
fastadmin
- fastadmin