CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It may be remotely exploitable.
CVE
CVE-2020-35720
Severity
MEDIUM
CVSS
5.4
EPSS
1.23%
Original NVD Description
Stored XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to store malicious code in multiple fields (first name, last name, and logon name) when creating or modifying a user via the submitUser.jsp file. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Related CVEs
Other vulnerabilities affecting the same vendor(s)