CVE-2020-23643: XSS
First published: Mon Jan 11 2021(Updated: )
XSS exists in JIZHICMS 1.7.1 via index.php/Wechat/checkWeixin?signature=1&echostr={XSS] to Home/c/WechatController.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Jizhicms Jizhicms | =1.7.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this JIZHICMS vulnerability?
The vulnerability ID for this JIZHICMS vulnerability is CVE-2020-23643.
What is the severity rating of CVE-2020-23643?
The severity rating of CVE-2020-23643 is medium with a CVSS score of 6.1.
How does the XSS vulnerability in JIZHICMS 1.7.1 occur?
The XSS vulnerability in JIZHICMS 1.7.1 occurs in the index.php/Wechat/checkWeixin endpoint by allowing an attacker to inject malicious code through the 'signature' parameter.
What is the affected software version for CVE-2020-23643?
The affected software version for CVE-2020-23643 is JIZHICMS 1.7.1.
Is there a fix available for this vulnerability?
Yes, a fix for this vulnerability may be available through the JIZHICMS project's official GitHub repository.
- collector/nvd-index
- vendor/jizhicms
- canonical/jizhicms jizhicms
- version/jizhicms jizhicms/1.7.1