CVE-2020-23450

Spiceworks Version <= 7.5.00107 is affected by XSS. Any name typed on Custom Groups function is vulnerable to stored XSS as they displayed on http://127.0.0.1/inventory/groups/ without output sanitization.

• CWE-79

• https://abuyv.comThird Party Advisory
• https://abuyv.com/cve/spiceworks-stored-xssExploit, Third Party Advisory
• https://abuyv.comThird Party Advisory
• https://abuyv.com/cve/spiceworks-stored-xssExploit, Third Party Advisory

Published

Sep 1, 2020

Last Modified

Jul 9, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-23426zzcms 201910 contains an access control vulnerability throug…9.8
• CVE-2020-23438Wondershare filmora 9.2.11 is affected by Trojan Dll hijacki…7.8
• CVE-2020-23446Verint Workforce Optimization suite 15.1 (15.1.0.37634) has …5.3
• CVE-2020-23447newbee-mall 1.0 is affected by cross-site scripting in shop-…6.1
• CVE-2020-23448newbee-mall all versions are affected by incorrect access co…9.8
• CVE-2020-23449newbee-mall all versions are affected by incorrect access co…7.5
• CVE-2020-23451Spiceworks Version <= 7.5.00107 is affected by CSRF which ca…8.8
• CVE-2020-23452A cross-site scripting (XSS) vulnerability in Selenium Grid …6.1
• CVE-2020-23466Cross Site Scripting (XSS) vulnerability exists in the phpgu…5.4
• CVE-2020-23469gmate v0.12+bionic contains a regular expression denial of s…7.5
• CVE-2020-23478Leo Editor v6.2.1 was discovered to contain a regular expres…7.5
• CVE-2020-23481CMS Made Simple 2.2.14 was discovered to contain a cross-sit…5.4