CVE-2020-24902 MEDIUM

CVE-2020-24902

Vendor N/A
Product n/a
Published January 7, 2021
Last update August 4, 2024

CVSS base score

4.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:N/S:C/UI:R

What the vulnerability does

01Description

Quixplorer <=2.4.1 is vulnerable to reflected cross-site scripting (XSS) caused by improper validation of user supplied input. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.

Key dates

02Disclosure timeline

January 7, 2021 CVE published
August 4, 2024 Record updated