CVE-2020-26885

MEDIO 6.1CVE-2020-26885 · Published 07/06/2021 · updated 17/06/2026

In breve

CVE-2020-26885 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda 2sxc (2sic).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 66.1% delle vulnerabilità.
Correzione: aggiornare a 11.22.00 o successiva.

Package	Affected versions	Patched versions
2sxc 2sic	`≥ 8.00.00, < 11.22.00`	`11.22.00`

Description

An issue was discovered in 2sic 2sxc before 11.22. A XSS vulnerability in the sxcver parameter of dnn/ui.html allows an attacker to craft a malicious URL that executes a JavaScript payload in a victim's browser.

References

burninatorsec.blogspot.com/2021/04/cve-2020-26885-xss-in-2sxc.html · Exploit
2sxc.org/en/blog/post/2sxc-security-notification-2021-001 · Vendor Advisory
burninatorsec.blogspot.com/2020/10/cve-2020-26885-xss-in-anchor-tags.html · Exploit
2sic/2sxc release · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free