CVE-2020-24390: EyesOfNetwork

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

eonweb in EyesOfNetwork before 5.3-7 does not properly escape the username on the /module/admin_logs page, which might allow pre-authentication stored XSS during login/logout logs recording.

Affected products

• EyesOfNetwork EyesOfNetwork: before 5.3 (fixed in 5.3)

Published 2020-08-27. Last modified 2026-06-17.