CVE

CVE-2020-22540

Date: (C)2024-04-17   (M)2024-04-17

Stored Cross-Site Scripting (XSS) vulnerability in Codoforum v4.9, allows attackers to execute arbitrary code and obtain sensitive information via crafted payload to Category name component.

Reference:

https://gist.github.com/s4fv4n/0d7a5093886cf41d9c478166e4aeec64