← All advisories

Critical severity9.6NVD Advisory· Published Oct 26, 2020· Updated Jun 17, 2026

CVE-2020-18766

CVE-2020-18766

Description

A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.

Affected products

3

AntSwordProject/antSword2 versions
cpe:2.3:a:antsword_project:antsword:2.0.7:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:antsword_project:antsword:2.0.7:*:*:*:*:*:*:*
- (no CPE)range: =2.0.7
AntSword/AntSwordcpe-rescue

Patches

Vulnerability mechanics

References

1

github.com/AntSwordProject/antSword/issues/147nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.