CVE-2020-21494
04.10.2021, 21:15
A cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via changing the doctype value to 0.
| Vendor | Product | Version |
|---|---|---|
| xiuno | xiunobbs | 4.0.4 |
𝑥
= Vulnerable software versions