CVE-2020-25120: XSS
Published Sep 3, 2020
·Updated
The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/search.php?do=dosearch URI.
Affected Software
1 affected component
vBulletin vBulletin=5.6.3
Event History
Sep 3, 2020
CVE Published
via MITRE·05:19 PM
Data Sourced
via MITRE·05:19 PM
Description
Frequently Asked Questions
1
What is CVE-2020-25120?
CVE-2020-25120 is a vulnerability in vBulletin 5.6.3 that allows XSS through the admincp/search.php?do=dosearch URI.
2
What is the severity of CVE-2020-25120?
The severity of CVE-2020-25120 is medium with a CVSS score of 4.8.
3
How does CVE-2020-25120 affect vBulletin?
CVE-2020-25120 affects vBulletin 5.6.3.
4
How can I fix the CVE-2020-25120 vulnerability?
To fix the CVE-2020-25120 vulnerability, you should update vBulletin to the latest version.
5
Where can I find more information about CVE-2020-25120?
You can find more information about CVE-2020-25120 at https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html.