← back
CVE-2020-19295

CVE-2020-19295

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 3.5%
exploitation probability
3.5%top 12% of all CVEs
observed exploitation
nono source reports it
A reflected cross-site scripting (XSS) vulnerability in the /weibo/topic component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML.
Affected products
n/a · n/a