CVE-2020-23631: XSS

Published Jan 11, 2021

Updated

Cross-site request forgery (CSRF) in admin/global/manage.php in WDJA CMS 1.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via the tongji parameter.

Affected Software

1 affected component

WDJA WDJA CMS=1.5

Event History

Jan 11, 2021

CVE Published

via MITRE·07:16 PM

Data Sourced

via MITRE·07:16 PM

Description

Frequently Asked Questions

What is CVE-2020-23631?

CVE-2020-23631 is a vulnerability in WDJA CMS 1.5 that allows remote attackers to conduct cross-site scripting (XSS) attacks via the tongji parameter.

How does CVE-2020-23631 impact my website?

CVE-2020-23631 allows remote attackers to conduct cross-site scripting (XSS) attacks, which can lead to unauthorized access or control over your website.

What is the severity of CVE-2020-23631?

The severity of CVE-2020-23631 is medium, with a CVSS score of 6.1.

How can I fix CVE-2020-23631?

To fix CVE-2020-23631, update WDJA CMS to a version that addresses the vulnerability and sanitize user input to prevent cross-site scripting (XSS) attacks.

Where can I find more information about CVE-2020-23631?

More information about CVE-2020-23631 can be found at the following references: [GitHub](https://github.com/shadoweb/wdja/issues/11) and [CNBlogs](https://www.cnblogs.com/wayne-tao/p/13110663.html).