CVE-2020-23450

5.4 mediumEPSS 0.6%

Medium (5.4) in spiceworks spiceworks. EPSS 0.6% chance of exploitation in the next 30 days.

Spiceworks Version <= 7.5.00107 is affected by XSS. Any name typed on Custom Groups function is vulnerable to stored XSS as they displayed on http://127.0.0.1/inventory/groups/ without output sanitization.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-09-01
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

spiceworks:spiceworks

References

https://abuyv.com
https://abuyv.com/cve/spiceworks-stored-xss
https://abuyv.com
https://abuyv.com/cve/spiceworks-stored-xss

Check your stack JSON