CVE-2020-20589
published 2022-12-15CVE-2020-20589: Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.
PriorityP423medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.58%
43.5th percentile
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| feehi | feehicms | — | — |
| feehi | feehicms | 0 – 2.0.8 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
FeehiCMS vulnerable to Cross Site Scripting
osv·2022-12-15
CVE-2020-20589 [MEDIUM] FeehiCMS vulnerable to Cross Site Scripting
FeehiCMS vulnerable to Cross Site Scripting
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.
GHSA
FeehiCMS vulnerable to Cross Site Scripting
ghsa·2022-12-15
CVE-2020-20589 [MEDIUM] CWE-79 FeehiCMS vulnerable to Cross Site Scripting
FeehiCMS vulnerable to Cross Site Scripting
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-15
Published