PT-2020-15613 · 13Enforme · 13Enforme Cms

Published 2020-08-27 · Updated 2020-08-28 · CVE-2020-23981

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions 13enforme CMS version 1.0

Description The issue concerns a Cross Site Scripting problem. It can be exploited via the id parameter in the "content.php" file.

Recommendations For 13enforme CMS version 1.0, avoid using the id parameter in the "content.php" file until the issue is resolved. As a temporary workaround, consider restricting access to the "content.php" file to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-23981

Affected Products

13Enforme Cms

References · 3

• 🔥 https://packetstormsecurity.com/files/157094/13enforme-CMS-SQL-Injection-Cross-Site-Scripting.html · Exploit
• https://osv.dev/vulnerability/CVE-2020-23981 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-23981 · Security Note