Vulnerability Details CVE-2020-7356
CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET parameter 'wayfinder_seqid' in wayfinder_meeting_input.jsp is not properly sanitized before being returned to the user or used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code and execute SYSTEM commands.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.571
EPSS Ranking 98.0%
CVSS Severity
CVSS v3 Score 10.0
CVSS v2 Score 10.0
References