CVE-2020-15599

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Victor CMS through 2019-02-28 allows XSS via the register.php user_firstname or user_lastname field.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jul 7, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-15607.8A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who sucCVE-2020-156006.5An issue was discovered in CMSUno before 1.6.1. uno.php allows CSRF to change the admin password.CVE-2020-156018.1If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Deep Security 10.x-12.x could allow an unautheCVE-2020-156027.8An untrusted search path remote code execution (RCE) vulnerability in the Trend Micro Secuity 2020 (v16.0.0.1146 and below) consumer family CVE-2020-156037.5An invalid memory read vulnerability in a Trend Micro Secuity 2020 (v16.0.0.1302 and below) consumer family of products' driver could allow CVE-2020-156047.5An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allCVE-2020-156058.1If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Vulnerability Protection 2.0 SP2 could allow aCVE-2020-156069.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. AuthenCVE-2020-156079.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. AuthenCVE-2020-156089.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. AuthenCVE-2020-156099.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. AuthenCVE-2020-15618.8A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who success
CVE-2020-15599: Medium severity, CVSS 6.1 | Vulnix