CVE-2020-21930: XSS
First published: Tue Aug 10 2021(Updated: )
A stored cross site scripting (XSS) vulnerability in the web_attr_2 field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Eyoucms Eyoucms | =1.4.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Eyoucms vulnerability?
The vulnerability ID for this Eyoucms vulnerability is CVE-2020-21930.
What is the title of the CVE-2020-21930 vulnerability?
The title of the CVE-2020-21930 vulnerability is 'A stored cross site scripting (XSS) vulnerability in the web_attr_2 field of Eyoucms v1.4.1 allows a…'
What is the description of the CVE-2020-21930 vulnerability?
The CVE-2020-21930 vulnerability is a stored cross site scripting (XSS) vulnerability in the web_attr_2 field of Eyoucms v1.4.1 that allows authenticated attackers to execute arbitrary web scripts or HTML.
What is the severity of the CVE-2020-21930 vulnerability?
The severity of the CVE-2020-21930 vulnerability is medium with a CVSS score of 5.4.
How can I fix the CVE-2020-21930 vulnerability in Eyoucms?
To fix the CVE-2020-21930 vulnerability in Eyoucms, update to a version that includes the patch for this vulnerability, such as Eyoucms v1.4.2 or higher.
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/eyoucms
- canonical/eyoucms eyoucms
- version/eyoucms eyoucms/1.4.1