Security Advisory

CVE-2020-21643

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-04-28 00:00:00

Last updated 2025-01-31 18:02:09

Assigner mitre

CVSS score not scored

State PUBLISHED

Cross Site Scripting (XSS) vulnerability in HongCMS 3.0 allows attackers to run arbitrary code via the callback parameter to /ajax/myshop.