CVE-2020-27459

2020-11-1614:55:49

mitre

www.cve.org

chronoforeum 2.0.11

stored xss

crafted payload

post

user execution

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

33.8%

JSON

Chronoforeum 2.0.11 allows Stored XSS vulnerabilities when inserting a crafted payload into a post. If any user sees the post, the inserted XSS code is executed.

References

github.com/nugmubs/chronoforums-cve/wiki/Stored-XSS-Vulnerability-in-Chronoforum-v2.0.11-%28Joomla-plugin%29