VULNERABILITY INTELLIGENCE

CVE-2020-1949

CVSS score6.1 MEDIUM
EPSS probability1.97%
CISA KEVNot currently listed
Published2020-04-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles and are vulnerable to reflected XSS attacks.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references