CVE-2020-20600: XSS
Published Dec 22, 2021
·Updated
MetInfo 7.0 beta contains a stored cross-site scripting (XSS) vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn.
Affected Software
1 affected component
Metinfo Metinfo=7.0.0-beta
Event History
Dec 22, 2021
CVE Published
via MITRE·10:41 PM
Data Sourced
via MITRE·10:41 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-20600.
2
What is the severity of CVE-2020-20600?
The severity of CVE-2020-20600 is medium with a CVSS score of 5.4.
3
What is the affected software?
The affected software is MetInfo 7.0 beta.
4
What is the description of CVE-2020-20600?
CVE-2020-20600 is a stored cross-site scripting (XSS) vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn.
5
How can I fix CVE-2020-20600?
To fix CVE-2020-20600, upgrade to a version of MetInfo that is not affected by this vulnerability.