CVE-2020-20589: XSS
Published Dec 15, 2022
·Updated
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.
Affected Software
1 affected component
Feehi Feehicms=2.0.8
Event History
Dec 15, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-20589?
CVE-2020-20589 has been classified as a medium-severity vulnerability.
2
How do I fix CVE-2020-20589?
To fix CVE-2020-20589, it is recommended to upgrade FeehiCMS to the latest version that addresses this XSS vulnerability.
3
What types of attacks can CVE-2020-20589 facilitate?
CVE-2020-20589 can facilitate Cross Site Scripting (XSS) attacks, allowing attackers to execute arbitrary code.
4
Which version of FeehiCMS is affected by CVE-2020-20589?
CVE-2020-20589 specifically affects FeehiCMS version 2.0.8.
5
Can CVE-2020-20589 be exploited by unprivileged users?
Yes, CVE-2020-20589 can be exploited by remote attackers, potentially without any special privileges.