2.39

DATE	CVE	VULNERABILITY TITLE	RISK
2021-10-14	CVE-2020-19962	Cross-site Scripting vulnerability in Chaoji CMS Project Chaoji CMS 2.39 A stored cross-site scripting (XSS) vulnerability in the getClientIp function in /lib/tinwin.class.php of Chaoji CMS 2.39, allows attackers to execute arbitrary web scripts. network low complexity chaoji-cms-project CWE-79	5.4

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.