CVE-2020-26669

Published: 2021-06-01T15:15Z

Last Modified: 2024-11-21T05:20Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A stored cross-site scripting (XSS) vulnerability was discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to execute arbitrary web scripts or HTML via the page content to site/index.php/admin/pages/update. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt