What’s Vulnerable › Vulnerabilities

CVE-2020-25470

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-10-26 · updated 2026-06-17
• Weakness: CWE-79

Description

AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code execution.

Affected products

• Antsword Project Antsword: 2.1.8.1

References

• https://github.com/AntSwordProject/antSword/issues/256
• https://github.com/AntSwordProject/antSword/issues/256

Get alerted when CVE-2020-25470 or the next vulnerability affects your stack