CVE-2020-22841

MEDIUM 4.8CVE-2020-22841 · Published 09/02/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
b2evolution b2evolution	`< 6.11.6`	`6.11.6`

Description

Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution via the plugin name input field in the plugin module.

References

packetstormsecurity.com/files/161363/b2evolution-CMS-6.11.6-Cross-Site-Scripting.html · Exploit
b2evolution/b2evolution · Third Party Advisory
exploit-db.com/exploits/49551 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free