CVE-2020-25470

6.1 mediumEPSS 1.3%

Medium (6.1) in antsword project antsword. EPSS 1.3% chance of exploitation in the next 30 days.

AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code execution.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-10-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

antsword_project:antsword

References

https://github.com/AntSwordProject/antSword/issues/256
https://github.com/AntSwordProject/antSword/issues/256

Check your stack JSON