CVE-2020-26701

5.4 mediumEPSS 0.9%

Medium (5.4) in kaaproject kaa. EPSS 0.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Dashboards section in Kaa IoT Platform v1.2.0 allows remote attackers to inject malicious web scripts or HTML Injection payloads via the Description parameter.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-11-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

kaaproject:kaa

References

http://packetstormsecurity.com/files/160082/Kaa-IoT-Platform-1.2.0-Cross-Site-Scripting.html
http://packetstormsecurity.com/files/160082/Kaa-IoT-Platform-1.2.0-Cross-Site-Scripting.html

Check your stack JSON