CVE-2020-18022: Qibosoft Qibocms

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) in Qibosoft QiboCMS v7 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information by injecting arbitrary commands in a HTTP request to the "ewebeditor\3.1.1\kindeditor.js" component.

Affected products

• Qibosoft Qibocms: version v7 only

Published 2021-04-28. Last modified 2026-06-17.