CVE-2020-37072 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Victor CMS 1.0 contains a stored cross-site scripting vulnerability in the 'comment_author' POST parameter that allows attackers to inject malicious scripts. At…
Medium CVSS: 5.1

CVE-2020-37072

Victor CMS 1.0 contains a stored cross-site scripting vulnerability in the 'comment_author' POST parameter that allows attackers to inject malicious scripts. Attackers can submit crafted JavaScript payloads through the comment submission form to execute arbitrary code in victim browsers.
Vendor
Victor Cms Project
Product
Victor Cms
CWE
CWE-79
Yayın Tarihi
2026-02-03 22:16:22
Güncelleme
2026-02-10 14:52:43
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-79 Victor Cms MEDIUM Victor Cms Project 2026

Referanslar

https://github.com/VictorAlagwu/CMSsite https://www.exploit-db.com/exploits/48484 https://www.vulncheck.com/advisories/victor-cms-commentauthor-persistent-cross-site-scripting