CVE-2020-19626

Name of the Vulnerable Software and Affected Versions: craftcms version 3.1.31

Description: The issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the "/admin/settings/sites/new" API endpoint. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.

Recommendations: For craftcms version 3.1.31, update to a version that contains a fix for this issue, as no specific workaround is provided for this version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.