Medium severity6.1NVD Advisory· Published Apr 28, 2021· Updated Jun 17, 2026
CVE-2020-17999
CVE-2020-17999
Description
Cross Site Scripting (XSS) in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php".
Affected products
2- MiniCMS/MiniCMSdescription
Patches
Vulnerability mechanics
References
1- github.com/bg5sbk/MiniCMS/issues/27nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.