CVE-2020-19887

Published: 2020-08-24T15:15Z

Last Modified: 2024-11-21T05:09Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

DBHcms v1.2.0 has a stored XSS vulnerability as there is no htmlspecialchars function for '$_POST['pageparam_insert_description']' variable in dbhcms\mod\mod.page.edit.php line 227, A remote authenticated with admin user can exploit this vulnerability to hijack other users. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt