CVE-2020-22540 Information

Description

Stored Cross-Site Scripting (XSS) vulnerability in Codoforum v4.9 allows attackers to execute arbitrary code and obtain sensitive information via crafted payload to Category name component.

Reference

https://gist.github.com/s4fv4n/0d7a5093886cf41d9c478166e4aeec64