CVE-2020-20363

MediumCVSS 4.8/10Last modified Jul 9, 2026

Description

Crossi Site Scripting (XSS) vulnerability in PbootCMS 2.0.3 in admin.php.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jul 8, 2021
Last modified
Jul 9, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-20377.2An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS coCVE-2020-20387.2An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS coCVE-2020-203894.8Cross Site Scripting (XSS) vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php.CVE-2020-20395.3An uncontrolled resource consumption vulnerability in Palo Alto Networks PAN-OS allows for a remote unauthenticated user to upload temporaryCVE-2020-203915.4Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via (1) Add Snippet and (2) Save snippets.CVE-2020-203929.8SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php.CVE-2020-20409.8A buffer overflow vulnerability in PAN-OS allows an unauthenticated attacker to disrupt system processes and potentially execute arbitrary cCVE-2020-204027.5Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access sensitive information via session fixation.CVE-2020-204065.4A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versionsCVE-2020-20417.5An insecure configuration of the appweb daemon of Palo Alto Networks PAN-OS 8.1 allows a remote unauthenticated user to send a specifically CVE-2020-204126.5lib/codebook.c in libvorbis before 1.3.6, as used in StepMania 5.0.12 and other products, has insufficient array bounds checking via a craftCVE-2020-204139.8SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle() function in ad
CVE-2020-20363: Medium severity, CVSS 4.8 | Vulnix