Security Advisory
CVE-2020-14014
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. The query parameter fid on the resource navigate.php does not perform sufficient data validation and/or encoding, making it vulnerable to reflected XSS.