Vulnerability CVE-2020-19914


Published: 2022-09-07   Modified: 2022-09-08

Description:
Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the attachment upload function.

 References:
https://kevinoclam.github.io/blog/2019/07/31/xiunobbs-upload/

Copyright 2026, cxsecurity.com

 

Back to Top