VULNERABILITY INTELLIGENCE

CVE-2020-18280

CVSS score6.1 MEDIUM

EPSS probability0.43%

CISA KEVNot currently listed

Published2023-05-09

Last modified2026-06-17

Description

Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the EMBED SRC function.