CVE-2020-5650: XSS
First published: Wed Oct 21 2020(Updated: )
Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tipsandtricks-hq Simple Download Monitor | <=3.8.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this cross-site scripting vulnerability?
CVE-2020-5650
What is the severity rating of CVE-2020-5650?
The severity rating of CVE-2020-5650 is medium (6.1).
What is the affected software for CVE-2020-5650?
The affected software for CVE-2020-5650 is Simple Download Monitor 3.8.8 and earlier.
How can remote attackers exploit CVE-2020-5650?
Remote attackers can exploit CVE-2020-5650 by injecting an arbitrary script via unspecified vectors.
Is there a fix available for CVE-2020-5650?
Yes, an update to Simple Download Monitor version 3.8.9 or later can fix CVE-2020-5650.
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/tags
- agent/type
- agent/description
- agent/event
- vendor/tipsandtricks-hq
- canonical/tipsandtricks-hq simple download monitor
- version/tipsandtricks-hq simple download monitor/3.8.8