CVE-2020-14014
24.06.2020, 15:15
An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. The query parameter fid on the resource navigate.php does not perform sufficient data validation and/or encoding, making it vulnerable to reflected XSS.
| Vendor | Product | Version |
|---|---|---|
| naviwebs | navigate_cms | 2.8 |
| naviwebs | navigate_cms | 2.9:r1433 |
𝑥
= Vulnerable software versions