CVE-2020-36524

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability was found in Refined Toolkit. It has been rated as problematic. Affected by this issue is some unknown functionality of the component UI-Image/UI-Button. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
unspecified	Refined Toolkit	n/a

References

https://seclists.org/fulldisclosure/2020/Oct/15Exploit, Mailing List, Third Party Advisory
https://vuldb.com/?id.164510Third Party Advisory
https://seclists.org/fulldisclosure/2020/Oct/15Exploit, Mailing List, Third Party Advisory
https://vuldb.com/?id.164510Third Party Advisory

Timeline

Published: Jun 7, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-365255.4A vulnerability classified as problematic has been found in Linking. This affects an unknown part of the component New Windows Macro. The ma CVE-2020-365265.4A vulnerability classified as problematic was found in Countdown Timer. This vulnerability affects unknown code of the component Macro Handl CVE-2020-365275.4A vulnerability, which was classified as problematic, has been found in Server Status. This issue affects some unknown processing of the com CVE-2020-365286.5A vulnerability, which was classified as critical, was found in Platinum Mobile 1.0.4.850. Affected is /MobileHandler.ashx which leads to br CVE-2020-365298.8A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22. This affects the file traceroute.p CVE-2020-36539.1Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon C CVE-2020-365308.8A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Su CVE-2020-365318.8A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the CVE-2020-365326.5A vulnerability has been found in Klapp App and classified as problematic. This vulnerability affects unknown code of the component Authoriz CVE-2020-365339.8A vulnerability was found in Klapp App and classified as problematic. This issue affects some unknown processing of the JSON Web Token Handl CVE-2020-365346.5A vulnerability was found in easyii CMS. It has been classified as problematic. Affected is an unknown function of the file /admin/sign/out.CVE-2020-365358.8A vulnerability classified as critical has been found in MINMAX. This affects an unknown part of the file /newsDia.php. The manipulation of