Beveiligingsadvies
CVE-2020-18022
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
Cross Site Scripting (XSS) in Qibosoft QiboCMS v7 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information by injecting arbitrary commands in a HTTP request to the "ewebeditor\3.1.1\kindeditor.js" component.