CVE-2020-17999

Publication date

2021-04-28 15:23:20

Family

mitre

State

PUBLISHED

Description

Cross Site Scripting (XSS) in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php".