CVE-2020-29653: XSS
Published Apr 13, 2022
·Updated
Froxlor through 0.10.22 does not perform validation on user input passed in the customermail GET parameter. The value of this parameter is reflected in the login webpage, allowing the injection of arbitrary HTML tags.
Affected Software
1 affected component
Froxlor Froxlor<=0.10.22
Remediation
Patch Available
Event History
Apr 13, 2022
CVE Published
via MITRE·12:02 PM
Data Sourced
via MITRE·12:02 PM
Description
Frequently Asked Questions
1
What is CVE-2020-29653?
CVE-2020-29653 is a vulnerability in Froxlor through version 0.10.22 that allows the injection of arbitrary HTML tags.
2
How severe is CVE-2020-29653?
CVE-2020-29653 has a severity rating of 6.1, which is considered medium.
3
What software is affected by CVE-2020-29653?
The Froxlor software through version 0.10.22 is affected by CVE-2020-29653.
4
How can I fix CVE-2020-29653?
To fix CVE-2020-29653, update Froxlor to a version beyond 0.10.22 that includes the necessary validation on user input.
5
Where can I find more information about CVE-2020-29653?
More information about CVE-2020-29653 can be found on the GitHub repository for Froxlor and on the nozero.io website.