CVE-2020-19914中 6.1Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the attachment upload funct…
CVE-2020-21496中 6.1A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrar…
CVE-2020-21495中 6.1A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrar…
CVE-2020-21494中 6.1A cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web…
CVE-2019-19998高 7.5Xiuno BBS 4.0 allows XXE via plugin/xn_wechat_public/route/token.php.