Medium severity5.4NVD Advisory· Published Aug 6, 2021· Updated Jun 17, 2026

CVE-2020-18693

Description

Cross Site Scripting (XSS) in MineWebCMS v1.7.0 allows remote attackers to execute arbitrary code by injecting malicious code into the 'Title' field of the component '/admin/news'.

Affected products

Mineweb/Minewebcms
cpe:2.3:a:mineweb:minewebcms:1.7.0:*:*:*:*:*:*:*
MineWebCMS/MineWebCMSdescription
Mineweb/Mineweb/minewebcmsllm-fuzzy
Range: =1.7.0

Patches

Vulnerability mechanics

References

github.com/MineWeb/MineWebCMS/issues/123nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000