← All advisories

Medium severity5.4NVD Advisory· Published Dec 18, 2020· Updated Jun 17, 2026

CVE-2020-20285

CVE-2020-20285

Description

There is a XSS in the user login page in zzcms 2019. Users can inject js code by the referer header via user/login.php

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Zzcms/Zzcms3 versions
cpe:2.3:a:zzcms:zzcms:2019:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:zzcms:zzcms:2019:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 2019

Patches

Vulnerability mechanics

References

1

github.com/iohex/ZZCMS/blob/master/zzcms2019_login_xss.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.