Vulnerability Details CVE-2020-20584
A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form parameter post to /public/console/profile/info-submit/.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.7%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- http://baigosso.com
- https://github.com/baigoStudio/baigoSSO
- https://github.com/baigoStudio/baigoSSO/
- https://github.com/baigoStudio/baigoSSO/issues/13
- http://baigosso.com
- https://github.com/baigoStudio/baigoSSO
- https://github.com/baigoStudio/baigoSSO/
- https://github.com/baigoStudio/baigoSSO/issues/13