CVE-2020-29477

MEDIUM 4.8CVE-2020-29477 · Published 30/12/2020 · updated 09/07/2026

In short

CVE-2020-29477 is a MEDIUM (CVSS 4.8) vulnerability affecting community (invisioncommunity).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
community invisioncommunity	`= 4.5.4`	No fix yet

Description

Invision Community 4.5.4 is affected by cross-site scripting (XSS) in the Field Name field. This vulnerability can allow an attacker to inject the XSS payload in Field Name and each time any user will open that, the XSS triggers and the attacker can able to steal the cookie according to the crafted payload.

References

exploit-db.com/exploits/49188 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free