Codologic Codoforum up to and including 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeover.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
codologic codoforum |