What’s Vulnerable › Vulnerabilities

CVE-2020-19962

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-10-14 · updated 2026-06-17
• Weakness: CWE-79

Description

A stored cross-site scripting (XSS) vulnerability in the getClientIp function in /lib/tinwin.class.php of Chaoji CMS 2.39, allows attackers to execute arbitrary web scripts.

Affected products

• Chaoji Cms Project Chaoji Cms: 2.39

References

• https://github.com/zhuxianjin/vuln_repo/blob/master/chaojicms_stored_xss.md
• https://github.com/zhuxianjin/vuln_repo/blob/master/chaojicms_stored_xss.md

Get alerted when CVE-2020-19962 or the next vulnerability affects your stack