CVE-2020-26799 in Luxcal

Résumé

par MITRE • 21/07/2025

A reflected cross-site scripting (XSS) vulnerability was discovered in index.php on Luxcal 4.5.2 which allows an unauthenticated attacker to steal other users' data.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: MITRE
• Réserver: 07/10/2020
• Divulgation: 21/07/2025
• Modérer: accepté
• Entrée: VDB-317180
• CPE: prêt
• CWE: CWE-79 (confirmé)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00534
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-26799
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-26799
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-26799/