CVE-2020-6847: Opentrade Project Opentrade

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

OpenTrade through 0.2.0 has a DOM-based XSS vulnerability that is executed when an administrator attempts to delete a message that contains JavaScript.

Affected products

• Opentrade Project Opentrade: up to and including 0.2.0

Published 2020-01-11. Last modified 2026-06-17.