← Back to CVE List

CVE-2020-1949

Published: 2020-04-01T19:15Z
Last Modified: 2024-11-21T05:11Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles and are vulnerable to reflected XSS attacks. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt