CVE-2020-26046 in Fuel情報

要約

〜によって MITRE • 2021年01月06日

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

公開

2021年01月06日

モデレーション

承諾済み

エントリ

VDB-167287

CPE

準備完了

CWE

CWE-79 (確認済み)

CVSS

3.5 (VulDB)

EPSS

0.00653

KEV

いいえ

アクティビティ

非常低い

セクター

Agriculture, Lawfirm, ...

ソース

MITRE	https://www.cve.org/CVERecord?id=CVE-2020-26046
NVD	https://nvd.nist.gov/vuln/detail/CVE-2020-26046
CVE Details	https://www.cvedetails.com/cve/CVE-2020-26046/

◂ 前概要次 ▸

Interested in the pricing of exploits?

See the underground prices here!