What is GHSA-f24c-hgx2-f289?

GHSA-f24c-hgx2-f289 is a security advisory published by GitHub Security Advisories with Medium severity. In vFairs 3.3, any user logged in to a vFairs virtual conference or event can modify any other...

Which CVE IDs does GHSA-f24c-hgx2-f289 cover?

GHSA-f24c-hgx2-f289 covers the following CVE IDs: CVE-2020-26680. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f24c-hgx2-f289?

GHSA-f24c-hgx2-f289 has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-f24c-hgx2-f289MediumCVSS 5.4

In vFairs 3.3, any user logged in to a vFairs virtual conference or event can modify any other...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2020-26680 →

📋 Description

In vFairs 3.3, any user logged in to a vFairs virtual conference or event can modify any other users profile information to include a cross-site scripting payload. The user data stored by the database includes HTML tags that are intentionally rendered out onto the page, and this can be abused to perform XSS attacks.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2020-26680
https://www.huntress.com/blog/zero-day-vulnerabilities-in-popular-event-management-platforms-could-leave-msps-open-to-attack
http://vfairs.com
https://github.com/advisories/GHSA-f24c-hgx2-f289