MEDIUM4.8

GHSA-7xqx-xwg9-jx34

NodCMS Cross Site Scripting vulnerability

Details

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows an attacker with administrative privileges to execute arbitrary code and gain access to sensitive information via a crafted script to the address parameter.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/khodakhah/nodcms

Introduced in: 0

No fixed version published yet for khodakhah/nodcms (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2020-20697[ADVISORY]
https://github.com/khodakhah/nodcms/issues/41[WEB]
https://github.com/khodakhah/nodcms[PACKAGE]