VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Apr 28, 2021· Updated Jun 17, 2026

CVE-2020-17999

CVE-2020-17999

Description

Cross Site Scripting (XSS) in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php".

Affected products

2
  • Minicms/Minicmscpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: = 1.10

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.