Medium severity6.1NVD Advisory· Published Jun 23, 2021· Updated Jun 17, 2026
CVE-2020-23962
CVE-2020-23962
Description
A cross site scripting (XSS) vulnerability in Catfish CMS 4.9.90 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "announcement_gonggao" parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:catfish-cms:catfish_cms:4.9.90:*:*:*:*:*:*:*
- Catfish CMS/Catfish CMSdescription
- Range: =4.9.90
Patches
Vulnerability mechanics
References
1- github.com/xwlrbh/Catfish/issues/7nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.