Files
CVEs-PoC/2020/CVE-2020-7051.md
T
2024-06-18 02:51:15 +02:00

749 B

CVE-2020-7051

Description

Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeover.

POC

Reference

Github

No PoCs found on GitHub currently.