CVE-2020-22841: XSS
Published Feb 9, 2021
·Updated
Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution via the plugin name input field in the plugin module.
Affected Software
1 affected component
b2evolution b2evolution<6.11.6
Event History
Feb 9, 2021
CVE Published
via MITRE·01:09 PM
Data Sourced
via MITRE·01:09 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-22841?
CVE-2020-22841 has been classified as a high severity vulnerability due to its potential for enabling stored cross-site scripting attacks.
2
How do I fix CVE-2020-22841?
To fix CVE-2020-22841, update b2evolution CMS to version 6.11.7 or later to mitigate the vulnerability.
3
What types of attacks can CVE-2020-22841 enable?
CVE-2020-22841 can enable attackers to execute malicious JavaScript code through the plugin name input field in the b2evolution CMS.
4
Is CVE-2020-22841 present in versions after 6.11.6 of b2evolution?
No, CVE-2020-22841 is present in b2evolution CMS version 6.11.6 and earlier versions.
5
Who is affected by CVE-2020-22841?
Users and administrators of b2evolution CMS versions 6.11.6 and prior are affected by CVE-2020-22841.