CVE-2020-28146

https://notcve.org/view.php?id=CVE-2020-28146

Cross Site Scripting (XSS) vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter. Se presenta una vulnerabilidad de tipo Cross Site Scripting (XSS) en Eyoucms versiones v1.4.7 y anteriores, por medio del parámetro addonfieldext. • https://github.com/eyoucms/eyoucms/issues/12 https://www.exploit-db.com/exploits/48530 https://www.eyoucms.com/ask/list_1_0/4511.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •