Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2020-20584

Description

A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form parameter post to /public/console/profile/info-submit/.

POC

Reference

- https://github.com/baigoStudio/baigoSSO

- https://github.com/baigoStudio/baigoSSO/

- https://github.com/baigoStudio/baigoSSO/issues/13

Github

No PoCs found on GitHub currently.