← All advisories

Medium severity6.1NVD Advisory· Published Nov 19, 2020· Updated Jun 17, 2026

CVE-2020-28350

CVE-2020-28350

Description

A Cross Site Scripting (XSS) vulnerability exists in OPAC in Sokrates SOWA SowaSQL through 5.6.1 via the sowacgi.php typ parameter.

Affected products

3

Sokrates/SowaSQL
cpe:2.3:a:sokrates:sowasql:*:*:*:*:*:*:*:*
Range: <=5.6.1
Sokrates SOWA/SowaSQLdescription
Sokrates/OPACllm-create
Range: <=5.6.1

Patches

Vulnerability mechanics

References

1

seclists.org/fulldisclosure/2020/Nov/32nvdExploitMailing ListThird Party Advisory

News mentions

0

No linked articles in our index yet.