CVE-2020-21517 – Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl p

Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21517

Reference (s):

• http://metinfo.com
• https://github.com/lvyyevd/cms/blob/master/metinfo/metinfo7.0.0.md
• https://u.mituo.cn/api/metinfo/download/7.0.0