Security Advisory
CVE-2020-7051
6.1
MEDIUM
Vulnerability Description
Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeover.
Published Date
February 13, 2020
Official Source
NIST NVD Advisory