← All advisories

Unrated severityNVD Advisory· Published Dec 18, 2020· Updated Aug 4, 2024

CVE-2020-20285

CVE-2020-20285

Description

There is a XSS in the user login page in zzcms 2019. Users can inject js code by the referer header via user/login.php

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

zzcms/zzcmsdescription
Zzcms/Zzcmsllm-fuzzy
Range: 2019

Patches

Vulnerability mechanics

References

1

github.com/iohex/ZZCMS/blob/master/zzcms2019_login_xss.mdmitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.

CVE-2020-20285 · VYPR