CVE-2020-19626: XSS
Cross Site Scripting (XSS) vulnerability in craftcms 3.1.31, allows remote attackers to inject arbitrary web script or HTML, via /admin/settings/sites/new.
Other sources
Cross Site Scripting (XSS) vulnerability in craftcms 3.1.31, allows remote attackers to inject arbitrary web script or HTML, via /admin/settings/sites/new.
— GitHub
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-19626?
The severity of CVE-2020-19626 is medium with a CVSS score of 5.4.
How does CVE-2020-19626 affect Craft CMS?
CVE-2020-19626 affects Craft CMS version 3.1.31.
What is the CWE classification for CVE-2020-19626?
CVE-2020-19626 has CWE classification 79 (Improper Neutralization of Input During Web Page Generation).
How can remote attackers exploit CVE-2020-19626?
Remote attackers can exploit CVE-2020-19626 by injecting arbitrary web script or HTML through the /admin/settings/sites/new endpoint in Craft CMS 3.1.31.
Are there any reference links for more information on CVE-2020-19626?
Yes, you can find more information on CVE-2020-19626 at the following links: [Reference 1](http://mayoterry.com/file/cve/XSS_vuluerability_in_Craftcms_3.1.31.pdf) and [Reference 2](https://github.com/craftcms/cms/commit/76a2168b6a5e30144f5c06da4ff264f4eca577ff).