Security Advisory
CVE-2020-19699
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Cross Site Scripting vulnerability found in KOHGYLW Kiftd v.1.0.18 allows a remote attacker to execute arbitrary code via the <ifram> tag in the upload file page.