CVE-2020-23374: XSS
Published May 10, 2021
·Updated
Cross-site scripting (XSS) vulnerability in admin/article/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter.
Affected Software
1 affected component
5none Nonecms=1.3.0
Event History
May 10, 2021
CVE Published
via MITRE·10:13 PM
Data Sourced
via MITRE·10:13 PM
Description
Frequently Asked Questions
1
What is CVE-2020-23374?
CVE-2020-23374 is a cross-site scripting (XSS) vulnerability in the admin/article/add.html page of noneCMS v1.3.0.
2
How does CVE-2020-23374 affect noneCMS v1.3.0?
CVE-2020-23374 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter in the admin/article/add.html page.
3
What is the severity of CVE-2020-23374?
CVE-2020-23374 has a severity of 5.4, which is considered medium.
4
How can I fix CVE-2020-23374?
To fix CVE-2020-23374, update noneCMS to a version that has addressed the vulnerability, if available.
5
Where can I find more information about CVE-2020-23374?
You can find more information about CVE-2020-23374 at the following reference: https://github.com/nangge/noneCms/issues/32