Medium severity6.1NVD Advisory· Published Aug 3, 2020· Updated Jun 17, 2026

CVE-2020-11583

Description

A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter.

Affected products

Plesk/Obsidiandescription
Plesk/Obsidianllm-fuzzy
Range: = 18.0.17

Patches

Vulnerability mechanics

References

medium.com/%400x00crash/xss-reflected-in-plesk-onyx-and-obsidian-1173a3eaffb5nvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000