Security Advisory

CVE-2020-12707

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-05-07 19:09:00

Last updated 2024-08-04 12:04:22

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An XSS vulnerability exists in modules/wysiwyg/save.php of LeptonCMS 4.5.0. This can be exploited because the only security measure used against XSS is the stripping of SCRIPT elements. A malicious actor can use HTML event handlers to run JavaScript instead of using SCRIPT elements.

← Browse all CVEs View on cve.org ↗