Lucene search
MitreCVELIST:CVE-2020-29477HistoryDec 30, 2020 - 2:19 p.m.
CVE-2020-29477
2020-12-3014:19:13
mitre
www.cve.org
4
invision community 4.5.4
cross-site scripting
field name
xss payload
cookie theft
EPSS
0.001
Percentile
38.9%
Invision Community 4.5.4 is affected by cross-site scripting (XSS) in the Field Name field. This vulnerability can allow an attacker to inject the XSS payload in Field Name and each time any user will open that, the XSS triggers and the attacker can able to steal the cookie according to the crafted payload.
Related
exploitdb
exploitdb
nvd
nvd
CVE-2020-29477
2020-12-30 15:15:12
prion
prion
Cross site scripting
2020-12-30 15:15:00
cve
cve
CVE-2020-29477
2020-12-30 15:15:12