CVE-2020-20285 · Vexday

CVE-2020-20285

EPSS 1.6%

There is a XSS in the user login page in zzcms 2019. Users can inject js code by the referer header via user/login.php

Affected products

Want to know if your infrastructure is exposed to this?

References