CVE-2020-36609

A vulnerability was found in annyshow DuxCMS 2.1. It has been classified as problematic. This affects an unknown part of the file admin.php&r=article/AdminContent/edit of the component Article Handler. The manipulation of the argument content leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-215115.

CVSS v3.1

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v3.1

2.4 LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

EPSS

0.39% chance of exploitation in the next 30 days, 32th percentile

Published

2022-12-08

Updated

2025-04-15

Proof-of-concept exploits (1)

• https://gitee.com/annyshow/DuxCMS2.1/issues/I183GG

References

• CVE Record
• NVD entry

Related

• CVE-2020-36607
• CVE-2020-36610
• CVE-2020-36603
• CVE-2020-36629
• CVE-2020-36565
• CVE-2020-36651