VULNERABILITY INTELLIGENCE

CVE-2020-13639

CVSS score6.1 MEDIUM

EPSS probability0.77%

CISA KEVNot currently listed

Published2021-08-31

Last modified2026-06-17

Description

A stored XSS vulnerability was discovered in the ECT Provider in OutSystems before 2020-09-04, affecting generated applications. It could allow an unauthenticated remote attacker to craft and store malicious Feedback content into /ECT_Provider/, such that when the content is viewed (it can only be v…