CVE Catalog
CVE-2020-20425
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk0.65%
47th percentile - higher than 47% of all known CVEs
Summary
A cross-site scripting (XSS) vulnerability was found in the search function of S-CMS Government Station Building System v5.0. It allows injection of malicious JavaScript code into the page.
Risk Assessment
An attacker can exploit this vulnerability to steal user sessions, redirect to malicious sites, or steal sensitive data.
Recommendation
Update the system to the latest version and implement input filtering and encoding in the search function.
Original NVD description (English source)
S-CMS Government Station Building System v5.0 contains a cross-site scripting (XSS) vulnerability in the search function.