Medium severity5.4NVD Advisory· Published Sep 1, 2021· Updated Jul 9, 2026

CVE-2020-20345

Description

WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WTCMS/WTCMSdescription
Wtcms/WTCMSllm-create
Range: = 1.0
Wtcms Project/Wtcms
cpe:2.3:a:wtcms_project:wtcms:1.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/taosir/wtcms/issues/10nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000