← back
CVE-2020-21147

CVE-2020-21147

EPSS 0.6%
RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious code to the administrator and execute JavaScript code, because webmain/flow/input/mode_emailmAction.php does not perform strict filtering.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://blog.csdn.net/adminxw/article/details/102881463https://github.com/alixiaowei/alixiaowei.github.io/issues/2