CVE-2020-21101

Name of the Vulnerable Software and Affected Versions: Screenly screenly-ose all versions

Description: The issue is related to a Cross Site Scripting vulnerability in the 'Add Asset' page. It can be exploited via manipulation of the URL field, potentially allowing a remote malicious user to execute arbitrary code.

Recommendations: For all affected versions, consider restricting access to the 'Add Asset' page until a fix is available. As a temporary workaround, avoid using the URL field in the 'Add Asset' page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.