CVE-2020-22481: Hack Hfish

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in HFish 0.5.1. When a payload is inserted where the password is entered, XSS code is triggered when the administrator views the information.

Affected products

• Hack Hfish: version 0.5.1 only

Published 2020-09-30. Last modified 2026-06-17.