CVE-2020-25495

No fix known EPSS 9%

A reflected Cross-site scripting (XSS) vulnerability in Xinuo (formerly SCO) Openserver version 5 and 6 allows remote attackers to inject arbitrary web script or HTML tag via the parameter 'section'.

Published 2020-12-18 · CVE record · OSV

Products: xinuos openserver