CVE-2020-25495

Name of the Vulnerable Software and Affected Versions Xinuo Openserver versions 5 and 6

Description A reflected Cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML tag via the parameter section. This enables attackers to potentially execute malicious scripts on the victim's browser.

Recommendations For Xinuo Openserver version 5: Update to a version that fixes this issue. For Xinuo Openserver version 6: Update to a version that fixes this issue. As a temporary workaround, consider restricting access to the section parameter to minimize the risk of exploitation.