Vulnerabilities > CVE-2020-15183 - Unspecified vulnerability in Soycms Project Soycms 3.0.2

047910
CVSS 4.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
soycms-project
NVD
Published: 2020-09-17
Updated: 2024-11-21

Summary

SoyCMS 3.0.2 and earlier is affected by Reflected Cross-Site Scripting (XSS) which leads to Remote Code Execution (RCE) from a known vulnerability. This allows remote attackers to force the administrator to edit files once the adminsitrator loads a specially crafted webpage.

Vulnerable Configurations

Part Description Count
Application
Soycms_Project
2

References