CVE-2020-9055

5.4 mediumEPSS 0.5%

Medium (5.4) in versiant lynx customer service portal. EPSS 0.5% chance of exploitation in the next 30 days.

Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or information disclosure.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-03-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

versiant:lynx_customer_service_portal

References

https://csp.poha.com/lynx/
https://kb.cert.org/vuls/id/962085/
https://csp.poha.com/lynx/
https://kb.cert.org/vuls/id/962085/

Check your stack JSON