AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-28149

CRITICAL · CVSS 9.6 EPSS 1.86%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-03-15 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.6. It may be remotely exploitable.

CVE
CVE-2020-28149
Severity
CRITICAL
CVSS
9.6
EPSS
1.86%

Original NVD Description

myDBR 5.8.3/4262 is affected by: Cross Site Scripting (XSS). The impact is: execute arbitrary code (remote). The component is: CSRF Token. The attack vector is: CSRF token injection to XSS.