CVE-2020-18475

Name of the Vulnerable Software and Affected Versions: Hucart CMS version 5.7.4

Description: A Cross Site Scripting (XSS) issue exists via the mes title field. An attacker can insert a malicious script into the header field of the outbox and send it to other users. When other users open the email, the malicious code will be executed.

Recommendations: For Hucart CMS version 5.7.4, consider restricting access to the mes title field to minimize the risk of exploitation. As a temporary workaround, avoid using the mes title field in emails until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.