CVE-2020-21517: XSS
First published: Mon Jun 21 2021(Updated: )
Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Metinfo Metinfo | =7.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this cross-site scripting (XSS) vulnerability in MetInfo 7.0.0?
The vulnerability ID for this cross-site scripting (XSS) vulnerability in MetInfo 7.0.0 is CVE-2020-21517.
How does the vulnerability occur?
The vulnerability occurs through the gourl parameter in login.php in MetInfo 7.0.0.
What is the severity of CVE-2020-21517?
The severity of CVE-2020-21517 is medium with a severity value of 6.1.
What software version is affected by this vulnerability?
MetInfo 7.0.0 is affected by this vulnerability.
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The CWE ID for this vulnerability is CWE-79.
- collector/nvd-index
- vendor/metinfo
- canonical/metinfo metinfo
- version/metinfo metinfo/7.0.0