CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. See the original NVD description below for full technical details.
CVE
CVE-2020-23450
Severity
MEDIUM
CVSS
5.4
EPSS
0.59%
Original NVD Description
Spiceworks Version <= 7.5.00107 is affected by XSS. Any name typed on Custom Groups function is vulnerable to stored XSS as they displayed on http://127.0.0.1/inventory/groups/ without output sanitization.
Related CVEs
Other vulnerabilities affecting the same vendor(s)