CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2020-19361
Medium (6.1) in medintux medintux. EPSS 1.1% chance of exploitation in the next 30 days.
Reflected XSS in Medintux v2.16.000 CCAM.php by manipulating the mot1 parameter can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- medintux:medintux
References
- https://emreovunc.com/blog/en/Medintux-v2.16.000-Reflected-XSS-01.png
- https://emreovunc.com/blog/en/Medintux-v2.16.000-Reflected-XSS-02.png
- https://github.com/EmreOvunc/Medintux-V2.16.000-Reflected-XSS-Vulnerability
- https://emreovunc.com/blog/en/Medintux-v2.16.000-Reflected-XSS-01.png
- https://emreovunc.com/blog/en/Medintux-v2.16.000-Reflected-XSS-02.png