An issue was discovered in HFish 0.5.1. When a payload is inserted where the password is entered, XSS code is triggered when the administrator views the information.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22481
Reference (s):
- https://github.com/hacklcx/HFish/issues/69