VULNERABILITY INTELLIGENCE

CVE-2020-25470

CVSS score6.1 MEDIUM
EPSS probability1.33%
CISA KEVNot currently listed
Published2020-10-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code execution.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references