Medium severity6.1NVD Advisory· Published Jul 30, 2021· Updated Jun 17, 2026
CVE-2020-26563
CVE-2020-26563
Description
ObjectPlanet Opinio before 7.14 allows reflected XSS via the survey/admin/surveyAdmin.do?action=viewSurveyAdmin query string. (There is also stored XSS if input to survey/admin/*.do is accepted from untrusted users.)
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:objectplanet:opinio:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:objectplanet:opinio:*:*:*:*:*:*:*:*range: <7.13
- (no CPE)
- (no CPE)range: <7.14
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/163699/ObjectPlanet-Opinio-7.12-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.objectplanet.com/opinio/changelog.htmlnvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.