CVE-2020-19511 – Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1) classNa

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1) className and !2) Description fields in index.php/Admin/Classes,

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19511

Reference (s):

• http://blog.topsec.com.cn/typesetter-5-1-storage-type-cross-site-script/
• http://www.typesettercms.com