Medium severity5.4NVD Advisory· Published May 10, 2021· Updated Jun 17, 2026
CVE-2020-23374
CVE-2020-23374
Description
Cross-site scripting (XSS) vulnerability in admin/article/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter.
Affected products
4- noneCMS/noneCMSdescription
Patches
Vulnerability mechanics
References
1- github.com/nangge/noneCms/issues/32nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.