CVE-2020-8985
HIGH
8.8
CVSS Score
Published: March 24, 2020 at 08:12 PM UTC
Updated: June 17, 2026 at 03:27 AM UTC
1 product affected across 1 vendorZendTo
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH8.8
Exploit prediction
EPSS 0.5%
Description
ZendTo prior to 5.22-2 Beta allowed reflected XSS and CSRF via the unlock.tpl unlock user functionality.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
3.103.113.123.133.203.513.523.533.543.553.56-23.573.583.593.603.613.623.633.643.653.70-23.713.723.733.743.753.903.913.923.933.944.004.014.024.03-34.05-24.06-24.07-14.08-44.09-14.10-44.10-54.11-14.11-104.11-114.11-124.11-134.11-144.11-24.11-34.11-44.11-54.11-74.11-84.11-94.12-54.12-64.13-14.20-24.20-34.20-54.20-64.20-74.25-34.27-14.27-24.27-44.27-54.27-64.27-74.28-14.28-25.00-15.00-25.01-55.02-55.03-15.04-75.09-135.10-15.10-25.11-15.11-25.11-35.11-45.11-55.11-65.12-3 beta5.12-4 beta5.12-6 beta5.12-7 beta5.12-8 beta5.13-15.13-25.14-2 beta5.14-5 beta5.15-15.16-1 beta5.16-4 beta5.16-5 beta5.16-7 beta5.16-8 beta5.16.6 beta5.17-15.17-25.17-35.17-45.17-5 beta5.17-65.18-1 beta5.18-2 beta5.19-1 production5.20-1 beta5.20-2 beta5.20-3 beta5.20-5 beta5.20-6 beta5.20-7 beta5.20-8 beta5.20-9 beta5.21-1 production5.21-2 production5.22-1 beta
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (1)
CVSS
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- NONE
- User Interaction
- REQUIRED
- Scope
- UNCHANGED
- Confidentiality
- HIGH
- Integrity
- HIGH
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-79CWE-352
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card