Medium severity6.1NVD Advisory· Published May 10, 2021· Updated Jun 17, 2026

CVE-2020-23371

Description

Cross-site scripting (XSS) vulnerability in static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf in noneCms v1.3.0 allows remote attackers to inject arbitrary web script or HTML via the movieName parameter.

Affected products

5none/Nonecms
cpe:2.3:a:5none:nonecms:1.3.0:*:*:*:*:*:*:*
noneCms/noneCmsdescription
NoneCms/NoneCmsllm-fuzzy
Range: = 1.3.0

Patches

Vulnerability mechanics

References

github.com/nangge/noneCms/issues/30nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000