CVE-2020-6159

URLs using “javascript:” have the protocol removed when pasted into the address bar to protect users from cross-site scripting (XSS) attacks, but in certain circumstances this removal was not performed. This could allow users to be socially engineered to run an XSS attack against themselves. This vulnerability affects Opera for Android versions below 61.0.3076.56532.

• CWE-79
• CWE-79

• https://security.opera.com/cross-site-scripting-in-ofa-opera-security-advisories/Vendor Advisory
• https://security.opera.com/cross-site-scripting-in-ofa-opera-security-advisories/Vendor Advisory

Published

Dec 23, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-6152A code execution vulnerability exists in the DICOM parse_dic…7.8
• CVE-2020-6153Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-6155A heap overflow vulnerability exists in the Pixar OpenUSD 20…7.8
• CVE-2020-6156A heap overflow vulnerability exists in Pixar OpenUSD 20.05 …7.8
• CVE-2020-6157Opera Touch for iOS before version 2.4.5 is vulnerable to an…4.3
• CVE-2020-6158Opera Mini for Android before version 52.2 is vulnerable to …4.7
• CVE-2020-6162An issue was discovered in Bftpd 5.3. Under certain circumst…9.1
• CVE-2020-6163The WikibaseMediaInfo extension 1.35 for MediaWiki allows XS…6.1
• CVE-2020-6164In SilverStripe through 4.5.0, a specific URL path configure…7.5
• CVE-2020-6165SilverStripe 4.5.0 allows attackers to read certain records …5.3
• CVE-2020-6166A flaw in the WordPress plugin, Minimal Coming Soon & Mainte…5.4
• CVE-2020-6167A flaw in the WordPress plugin, Minimal Coming Soon & Mainte…8.8