CVE-2020-23719 – Cross site scripting (XSS) vulnerability in application/controllers/Admin

4 years ago

Cross site scripting (XSS) vulnerability in application/controllers/AdminController.php in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the bbsmeta parameter.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-23719

Reference (s):

https://github.com/xujinliang/zibbs/issues/5