CVE-2020-19880

Name of the Vulnerable Software and Affected Versions DBHcms version 1.2.0

Description The issue is related to a stored XSS vulnerability due to the lack of proper input sanitization, specifically the absence of the htmlspecialchars function for the 'Name' field in dbhcmstypes.php. This allows a remote unauthenticated attacker to exploit the vulnerability, potentially leading to the hijacking of other users' sessions.

Recommendations For DBHcms version 1.2.0, consider applying proper input validation and sanitization, such as using the htmlspecialchars function for the Name field in dbhcmstypes.php to prevent XSS attacks. As a temporary workaround, restrict access to the vulnerable types.php file until a proper fix is applied.