CVE-2020-12530

MEDIUM 6.1CVE-2020-12530 · Published 02/03/2021 · updated 17/06/2026

In short

CVE-2020-12530 is a MEDIUM (CVSS 6.1) vulnerability affecting mbconnect24 (mbconnectline), mymbconnect24 (mbconnectline).
Chance of exploitation in the next 30 days (EPSS): 0.65%, higher than 51.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mbconnect24 mbconnectline	`≤ 2.6.2`	No fix yet
mymbconnect24 mbconnectline	`≤ 2.6.2`	No fix yet

Description

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. There is an XSS issue in the redirect.php allowing an attacker to inject code via a get parameter.

References

cert.vde.com/de-de/advisories/vde-2021-003 · Third Party Advisory

More vulnerabilities in mbconnect24

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mbconnect24

mbconnectline

≤ 2.6.2

No fix yet

mymbconnect24

mbconnectline

≤ 2.6.2

No fix yet

More vulnerabilities in mbconnect24

See all →