VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Sep 1, 2020· Updated Jul 9, 2026

CVE-2020-23450

CVE-2020-23450

Description

Spiceworks Version <= 7.5.00107 is affected by XSS. Any name typed on Custom Groups function is vulnerable to stored XSS as they displayed on http://127.0.0.1/inventory/groups/ without output sanitization.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Spiceworks/Spiceworks2 versions
    cpe:2.3:a:spiceworks:spiceworks:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:spiceworks:spiceworks:*:*:*:*:*:*:*:*range: <=7.5.00107
    • (no CPE)range: <=7.5.00107
  • Spiceworks/Spiceworksdescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.