Medium severity6.1NVD Advisory· Published Jan 9, 2020· Updated Jun 17, 2026

CVE-2020-6758

Description

A cross-site scripting (XSS) vulnerability in Option/optionsAll.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows remote attackers to inject arbitrary web script or HTML via the ContentFrame parameter.

Affected products

Rasilient/PixelStor 5000 Kdescription
Rasilient/PixelStor 5000llm-fuzzy
Range: K:4.0.1580-20150629 (KDI Version)

Patches

Vulnerability mechanics

References

pwnedchile.com/2020/01/08/pixelstor-5000-rce-exploit/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000