Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-hwdk-umd9-pbhp
Vulnerability ID VCID-hwdk-umd9-pbhp
Aliases CVE-2020-29653
GHSA-j739-gw6q-f4c7
Summary HTML Injection in Froxlor
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00331 https://api.first.org/data/v1/epss?cve=CVE-2020-29653
epss 0.00331 https://api.first.org/data/v1/epss?cve=CVE-2020-29653
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-j739-gw6q-f4c7
cvssv3.1 6.1 https://github.com/Froxlor/Froxlor
generic_textual MODERATE https://github.com/Froxlor/Froxlor
cvssv3.1 6.1 https://github.com/Froxlor/Froxlor/commit/6bf5eccc2477257b6c1760a3c3784ae7e0554ce0
generic_textual MODERATE https://github.com/Froxlor/Froxlor/commit/6bf5eccc2477257b6c1760a3c3784ae7e0554ce0
cvssv3.1 6.1 https://github.com/Froxlor/Froxlor/security/advisories
generic_textual MODERATE https://github.com/Froxlor/Froxlor/security/advisories
cvssv3.1 6.1 https://nozero.io/en/cve-2020-29653-froxlor-html-injection-dangling-markup
generic_textual MODERATE https://nozero.io/en/cve-2020-29653-froxlor-html-injection-dangling-markup
cvssv3.1 6.1 https://nvd.nist.gov/vuln/detail/CVE-2020-29653
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2020-29653
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2020-29653
https://github.com/Froxlor/Froxlor
https://github.com/Froxlor/Froxlor/commit/6bf5eccc2477257b6c1760a3c3784ae7e0554ce0
https://github.com/Froxlor/Froxlor/security/advisories
https://nozero.io/en/cve-2020-29653-froxlor-html-injection-dangling-markup
CVE-2020-29653 https://nvd.nist.gov/vuln/detail/CVE-2020-29653
CVE-2020-29653-FROXLOR-HTML-INJECTION-DANGLING-MARKUP https://nozero.io/en/cve-2020-29653-froxlor-html-injection-dangling-markup/
GHSA-j739-gw6q-f4c7 https://github.com/advisories/GHSA-j739-gw6q-f4c7
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/Froxlor/Froxlor
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/Froxlor/Froxlor/commit/6bf5eccc2477257b6c1760a3c3784ae7e0554ce0
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/Froxlor/Froxlor/security/advisories
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://nozero.io/en/cve-2020-29653-froxlor-html-injection-dangling-markup
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2020-29653
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.56428
EPSS Score 0.00331
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T20:28:45.143502+00:00 GHSA Importer Import https://github.com/advisories/GHSA-j739-gw6q-f4c7 38.6.0