CVE-2020-19883

Name of the Vulnerable Software and Affected Versions DBHcms version 1.2.0

Description The issue is related to a stored XSS vulnerability due to the lack of a security filter in the mod.users.view.php file, specifically on line 57, for the user login variable. A remote authenticated attacker with admin user privileges can exploit this to hijack other users' sessions.

Recommendations For DBHcms version 1.2.0, consider temporarily disabling the mod.users.view.php module until a patch is available, or restrict access to this module to minimize the risk of exploitation. Avoid using the user login variable in the affected code until the issue is resolved.