Cross-Site Scripting Vulnerability in Macrob7 Macs Framework by vulnerability-lab
CVE-2020-36498

5.4MEDIUM

Key Information:

Vendor: Macrob7 Macs Framework Content Management System Project
Status: Macrob7 Macs Framework Content Management System
Vendor: CVE Published:; 22 October 2021

🔔 Create Macrob7 Macs Framework Content Management System Project Vulnerability Alert

What is CVE-2020-36498?

The Macrob7 Macs Framework content management system version 1.14f is subject to a cross-site scripting vulnerability located in the account reset function. This security flaw permits attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the email input field. If exploited, this vulnerability could lead to a range of attacks, compromising user data and the integrity of the web application.

References

https://www.vulnerability-lab.com/get_content.php?id=2206

x_refsource_MISC

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 22, 2021
Vulnerability Reserved
Oct 20, 2021

CVE-2020-36498 Data

JSON