CVE-2020-21517: XSS
Published Jun 21, 2021
·Updated
Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php.
Affected Software
1 affected component
Metinfo Metinfo=7.0.0
Event History
Jun 21, 2021
CVE Published
via MITRE·02:55 PM
Data Sourced
via MITRE·02:55 PM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this cross-site scripting (XSS) vulnerability in MetInfo 7.0.0?
The vulnerability ID for this cross-site scripting (XSS) vulnerability in MetInfo 7.0.0 is CVE-2020-21517.
2
How does the vulnerability occur?
The vulnerability occurs through the gourl parameter in login.php in MetInfo 7.0.0.
3
What is the severity of CVE-2020-21517?
The severity of CVE-2020-21517 is medium with a severity value of 6.1.
4
What software version is affected by this vulnerability?
MetInfo 7.0.0 is affected by this vulnerability.
5
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The CWE ID for this vulnerability is CWE-79.