VULNERABILITY INTELLIGENCE

CVE-2020-18125

CVSS score6.1 MEDIUM

EPSS probability0.57%

CISA KEVNot currently listed

Published2021-08-30

Last modified2026-06-17

Description

A reflected cross-site scripting (XSS) vulnerability in the /plugin/ajax.php component of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML.