CVE-2020-20700

Name of the Vulnerable Software and Affected Versions: S-CMS PHP version 3.0

Description: A stored cross site scripting (XSS) issue exists, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Title Entry text box in the /app/form add/ endpoint.

Recommendations: For S-CMS PHP version 3.0, update the software to remove the stored XSS vulnerability in the /app/form add/ endpoint, specifically ensuring that user input in the Title Entry text box is properly sanitized to prevent the execution of arbitrary web scripts or HTML.