Unrated severityNVD Advisory· Published May 7, 2020· Updated Aug 4, 2024
CVE-2020-12707
CVE-2020-12707
Description
An XSS vulnerability exists in modules/wysiwyg/save.php of LeptonCMS 4.5.0. This can be exploited because the only security measure used against XSS is the stripping of SCRIPT elements. A malicious actor can use HTML event handlers to run JavaScript instead of using SCRIPT elements.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- LeptonCMS/LeptonCMSdescription
- Range: = 4.5.0
Patches
Vulnerability mechanics
References
1- gitlab.com/lepton-cms/LEPTON/-/commit/52215f708395a329c9e17ea33bfc6762d4efccbbmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.