CVE-2020-26799 in Luxcal

Sumário

de MITRE • 21/07/2025

A reflected cross-site scripting (XSS) vulnerability was discovered in index.php on Luxcal 4.5.2 which allows an unauthenticated attacker to steal other users' data.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsável: MITRE
• Reservar: 07/10/2020
• Divulgação: 21/07/2025
• Moderação: aceite
• Entrada: VDB-317180
• CPE: pronto
• CWE: CWE-79 (confirmado)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00534
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-26799
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-26799
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-26799/