CVE-2020-18699: Talelin Lin-CMS-Flask

Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'.

Affected products

• Talelin Lin-CMS-Flask: version 0.1.1 only

Published 2021-08-16. Last modified 2026-06-17.