VULNERABILITY INTELLIGENCE

CVE-2020-20349

CVSS score5.4 MEDIUM

EPSS probability0.53%

CISA KEVNot currently listed

Published2021-09-01

Last modified2026-06-17

Description

WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link address field under the background links module.