CVE-2020-15183

MEDIO 4.8CVE-2020-15183 · Published 17/09/2020 · updated 17/06/2026

In breve

CVE-2020-15183 è una vulnerabilità MEDIO (CVSS 4.8) che riguarda soycms (soycms project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.7%, superiore al 78.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
soycms soycms_project	`≤ 3.0.2`	No fix yet

Description

SoyCMS 3.0.2 and earlier is affected by Reflected Cross-Site Scripting (XSS) which leads to Remote Code Execution (RCE) from a known vulnerability. This allows remote attackers to force the administrator to edit files once the adminsitrator loads a specially crafted webpage.

References

inunosinsi/soycms commit 045a222 · Patch
inunosinsi/soycms security advisory · Third Party Advisory
youtu.be/uAMAwH35ups · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free