Kuicms Php EE 2.0 Persistent Cross-Site Scripting via bbs reply
Vulnerability Description
Kuicms Php EE 2.0 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted content through the bbs reply endpoint. Attackers can send POST requests to /web/?c=bbs&a=reply with HTML and JavaScript payloads in the content parameter to execute arbitrary scripts in users' browsers.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-37222
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- China Banking and Insurance Information Technology Management Co., Ltd.
Affected Vendor
Kuicms
View all reports →