CVE-2020-36609

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability was found in annyshow DuxCMS 2.1. It has been classified as problematic. This affects an unknown part of the file admin.php&r=article/AdminContent/edit of the component Article Handler. The manipulation of the argument content leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-215115.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-707

Affected software

Vendor	Product	Versions
annyshow	DuxCMS	2.1

References

https://gitee.com/annyshow/DuxCMS2.1/issues/I183GGExploit, Issue Tracking, Third Party Advisory
https://vuldb.com/?id.215115Third Party Advisory
https://gitee.com/annyshow/DuxCMS2.1/issues/I183GGExploit, Issue Tracking, Third Party Advisory
https://vuldb.com/?id.215115Third Party Advisory

Timeline

Published: Dec 8, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-36619.8Buffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which exceeds MAX_UINT32 range due to lack of validati CVE-2020-366108.0A vulnerability was found in annyshow DuxCMS 2.1. It has been declared as problematic. This vulnerability affects unknown code. The manipula CVE-2020-366117.1Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Linux (Hitachi Tuning Manager server, Hitachi Tuning Manager - Agen CVE-2020-366157.8An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1. Processing a maliciously cra CVE-2020-366179.8A vulnerability was found in ewxrjk sftpserver. It has been declared as problematic. Affected by this vulnerability is the function sftp_par CVE-2020-366189.8A vulnerability classified as critical has been found in Furqan node-whois. Affected is an unknown function of the file index.coffee. The ma CVE-2020-366199.8A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function add_ch of the file demod_flex.c. Th CVE-2020-36629.8Buffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snap CVE-2020-366207.5A vulnerability was found in Brondahl EnumStringValues up to 4.0.0. It has been declared as problematic. This vulnerability affects the func CVE-2020-366216.1A vulnerability, which was classified as problematic, has been found in chedabob whatismyudid. Affected by this issue is the function export CVE-2020-366226.5A vulnerability was found in sah-comp bienlein and classified as problematic. This issue affects some unknown processing. The manipulation l CVE-2020-366236.5A vulnerability was found in Pengu. It has been declared as problematic. Affected by this vulnerability is the function runApp of the file s