← All advisories

Medium severity6.1NVD Advisory· Published Apr 28, 2023· Updated Jun 17, 2026

CVE-2020-21643

CVE-2020-21643

Description

Cross Site Scripting (XSS) vulnerability in HongCMS 3.0 allows attackers to run arbitrary code via the callback parameter to /ajax/myshop.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

HongCMS/HongCMSdescription
HongCMS/HongCMSllm-fuzzy
Range: =3.0
Neeke/Hongcmsllm-fuzzy
Range: =3.0

Patches

Vulnerability mechanics

References

1

github.com/Neeke/HongCMS/issues/15nvdExploitIssue Tracking

News mentions

0

No linked articles in our index yet.