Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-24138

Cross Site Scripting (XSS) vulnerability in wcms 0.3.2 allows remote attackers to inject arbitrary web script and HTML via the pagename parameter to wex/html.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.4%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
Products affected by CVE-2020-24138
  • Wcms » Wcms » Version: 0.3.2
    cpe:2.3:a:wcms:wcms:0.3.2


Contact Us

Shodan ® - All rights reserved