CVE-2020-19914 Information

Description

Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the attachment upload function.

Reference

https://kevinoclam.github.io/blog/2019/07/31/xiunobbs-upload/