Medium severity5.4NVD Advisory· Published Jun 26, 2023· Updated Jun 17, 2026

CVE-2020-23065

Description

Cross Site Scripting vulnerabiltiy in eZ Systems AS eZPublish Platform v.5.4 and eZ Publish Legacy v.5.4 allows a remote authenticated attacker to execute arbitrary code via the video-js.swf.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

eZ Systems/eZ Publish Platformllm-fuzzy
Range: 5.4
eZ Systems/eZ Publish Legacyllm-fuzzy
Range: 5.4
Ibexa/Ezpublish Legacy
cpe:2.3:a:ibexa:ezpublish_legacy:5.4:*:*:*:*:*:*:*
Ibexa/Ezpublish Platform
cpe:2.3:a:ibexa:ezpublish_platform:5.4:*:*:*:*:*:*:*
eZ Systems AS/eZPublish Platformdescription

Patches

Vulnerability mechanics

References

ezplatform.com/security-advisories/ezsa-2020-003-xss-in-demobundle-ezdemo-bundled-videojsnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000