CVE-2020-19158

Publication date

2021-09-15 13:52:55

Family

mitre

State

PUBLISHED

Description

Cross Site Scripting (XSS) in S-CMS build 20191014 and earlier allows remote attackers to execute arbitrary code via the Site Title parameter of the component /data/admin/#/app/config/.