Medium severity6.1NVD Advisory· Published Sep 15, 2021· Updated Jun 17, 2026

CVE-2020-19157

Description

Cross Site Scripting (CSS) in Wenku CMS v3.4 allows remote attackers to execute arbitrary code via the 'Intro' parameter for the component '/index.php?m=ucenter&a=index'.

Affected products

Wenkucms Project/Wenkucms
cpe:2.3:a:wenkucms_project:wenkucms:3.4:*:*:*:*:*:*:*
Wenku CMS/Wenku CMSdescription
Wenku CMS/Wenku CMSllm-create
Range: <3.4

Patches

Vulnerability mechanics

References

github.com/TL-swallow/swallow/issues/14nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000