CVE-2020-25115 in vBulletin

الملخص

بحسب MITRE

The Admin CP in vBulletin 5.6.3 allows XSS via an Occupation Title or Description to User Profile Field Manager.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• حجز: 03/09/2020
• الاعتدال: تمت الموافقة
• إدخال: VDB-160700
• CPE: جاهز
• CWE: CWE-79 (مؤكد)
• CVSS: 4.8 (NVD)
• EPSS: 0.00553
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-25115
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-25115
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-25115/