VULNERABILITY INTELLIGENCE

CVE-2020-28141

CVSS score5.4 MEDIUM
EPSS probability0.60%
CISA KEVNot currently listed
Published2021-04-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references