VULNERABILITY INTELLIGENCE

CVE-2020-27741

CVSS score6.1 MEDIUM

EPSS probability1.08%

CISA KEVNot currently listed

Published2020-10-28

Last modified2026-06-17

Description

Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote attackers to inject arbitrary web script or HTML via multiple pages and parameters. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread.