Medium severity5.4NVD Advisory· Published May 26, 2021· Updated Jul 9, 2026
CVE-2020-26680
CVE-2020-26680
Description
In vFairs 3.3, any user logged in to a vFairs virtual conference or event can modify any other users profile information to include a cross-site scripting payload. The user data stored by the database includes HTML tags that are intentionally rendered out onto the page, and this can be abused to perform XSS attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- vFairs/vFairsdescription
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.