Medium severity5.4NVD Advisory· Published Apr 29, 2021· Updated Jun 17, 2026
CVE-2020-21101
CVE-2020-21101
Description
Cross Site Scriptiong vulnerabilityin Screenly screenly-ose all versions, including v1.8.2 (2019-09-25-Screenly-OSE-lite.img), in the 'Add Asset' page via manipulation of a 'URL' field, which could let a remote malicious user execute arbitrary code.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17- Screenly/screenly-osedescription
- Range: <=v1.8.2
cpe:2.3:a:screenly:screenly:0.9:*:*:*:ose:*:*:*+ 14 more
- cpe:2.3:a:screenly:screenly:0.9:*:*:*:ose:*:*:*
- cpe:2.3:a:screenly:screenly:0.9.1:*:*:*:ose:*:*:*
- cpe:2.3:a:screenly:screenly:0.10:*:*:*:ose:*:*:*
- cpe:2.3:a:screenly:screenly:0.11:*:*:*:ose:*:*:*
- cpe:2.3:a:screenly:screenly:0.12:*:*:*:ose:*:*:*
- cpe:2.3:a:screenly:screenly:0.12.1:*:*:*:ose:*:*:*
- cpe:2.3:a:screenly:screenly:0.13:*:*:*:ose:*:*:*
- cpe:2.3:a:screenly:screenly:0.14:*:*:*:ose:*:*:*
- cpe:2.3:a:screenly:screenly:0.15:*:*:*:ose:*:*:*
- cpe:2.3:a:screenly:screenly:0.15.1:*:*:*:ose:*:*:*
- cpe:2.3:a:screenly:screenly:0.16:*:*:*:ose:*:*:*
- cpe:2.3:a:screenly:screenly:0.17:*:*:*:ose:*:*:*
- cpe:2.3:a:screenly:screenly:0.18:*:*:*:ose:*:*:*
- cpe:2.3:a:screenly:screenly:0.18.1:*:*:*:ose:*:*:*
- cpe:2.3:a:screenly:screenly:0.18.2:*:*:*:ose:*:*:*
Patches
Vulnerability mechanics
References
1- github.com/Screenly/screenly-ose/issues/1254nvdThird Party Advisory
News mentions
0No linked articles in our index yet.