Vulnerability Details : CVE-2020-15183

SoyCMS 3.0.2 and earlier is affected by Reflected Cross-Site Scripting (XSS) which leads to Remote Code Execution (RCE) from a known vulnerability. This allows remote attackers to force the administrator to edit files once the adminsitrator loads a specially crafted webpage.
Published 2020-09-17 20:15:13
Updated 2020-09-23 20:00:52
Source GitHub, Inc.
View at NVD,   CVE.org
Vulnerability category: Cross site scripting (XSS)Execute code

Exploit prediction scoring system (EPSS) score for CVE-2020-15183

EPSS FAQ
0.15%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 50 %
Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-15183

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
3.5
 LOW AV:N/AC:M/Au:S/C:N/I:P/A:N
6.8
2.9
 NIST
4.8
 MEDIUM CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1.7
2.7
 NIST
8.4
 HIGH CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
1.7
6.0
 GitHub, Inc.

CWE ids for CVE-2020-15183

References for CVE-2020-15183

Products affected by CVE-2020-15183

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close