CVE-2020-23050

8.0 highEPSS 1.2%

High (8.0) in taotesting tao assessment platform. EPSS 1.2% chance of exploitation in the next 30 days.

TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a HTML injection vulnerability in the userFirstName parameter of the user account input field. This vulnerability allows attackers to execute phishing attacks, external redirects, and arbitrary code.

Severity

CVSS 3.1

8.0 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-74
Published: 2021-10-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

taotesting:tao_assessment_platform

References

https://cwe.mitre.org/data/definitions/79.html
https://www.vulnerability-lab.com/get_content.php?id=2215
https://cwe.mitre.org/data/definitions/79.html
https://www.vulnerability-lab.com/get_content.php?id=2215

Check your stack JSON