CVE-2020-24902 Scanner
Detects 'Cross-Site Scripting (XSS)' vulnerability in Quixplorer affects v. through 2.4.1.
Used 2.7k times · 3.4k assets checked · url
CVE
CVE-2020-24902
4.7
CVSSmedium
Exploitable remotely over the internet · no authentication required · user interaction needed.
Description
Quixplorer <=2.4.1 is vulnerable to reflected cross-site scripting (XSS) caused by improper validation of user supplied input. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
Attack Vector
Network
Privileges Req.
None
User Interaction
Required
Updated Oct 24, 2026View on NVD →
S4E scanner
Monitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →