CVE-2020-23644: XSS
Published Jan 11, 2021
·Updated
XSS exists in JIZHICMS 1.7.1 via index.php/Error/index?msg={XSS] to Home/c/ErrorController.php.
Affected Software
1 affected component
Jizhicms JIZHICMS=1.7.1
Event History
Jan 11, 2021
CVE Published
via MITRE·01:16 PM
Data Sourced
via MITRE·01:16 PM
Description
Frequently Asked Questions
1
What is CVE-2020-23644?
CVE-2020-23644 is a vulnerability in JIZHICMS 1.7.1 that allows for cross-site scripting (XSS) attacks.
2
How does CVE-2020-23644 affect JIZHICMS 1.7.1?
CVE-2020-23644 affects JIZHICMS 1.7.1 by allowing attackers to execute malicious script code on the affected website.
3
What is the severity of CVE-2020-23644?
CVE-2020-23644 has a severity rating of medium with a CVSS score of 6.1.
4
How can I fix CVE-2020-23644 in JIZHICMS 1.7.1?
To fix CVE-2020-23644, it is recommended to update to the latest version of JIZHICMS or apply the provided patch from the official GitHub repository.
5
Where can I find more information about CVE-2020-23644?
More information about CVE-2020-23644 can be found in the reference link: https://github.com/Cherry-toto/jizhicms/issues/28