Medium severity5.4NVD Advisory· Published Sep 29, 2021· Updated Jun 17, 2026
CVE-2020-20781
CVE-2020-20781
Description
A stored cross-site scripting (XSS) vulnerability in /ucms/index.php?do=list_edit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or content text fields.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:ucms_project:ucms:1.4.7:*:*:*:*:*:*:*
- UCMS/UCMSdescription
- Range: =1.4.7
Patches
Vulnerability mechanics
References
1- github.com/forget-code/ucms/issues/1nvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.