PT-2020-15210
CVE-2020-19884
·
Published
2020-08-24
·
Updated
2020-08-25
Description by
CVSS 3.1
4.8
MediumMetricsAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
DBHcms version 1.2.0
Description
The issue is related to a stored XSS vulnerability due to the absence of the htmlspecialchars function in the dbhcmsmodmod.domain.edit.php file at line 119.
Recommendations
For DBHcms version 1.2.0, consider adding the htmlspecialchars function to the dbhcmsmodmod.domain.edit.php file at line 119 to prevent XSS attacks. As a temporary workaround, restrict access to the mod.domain.edit.php module to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾