VULNERABILITY INTELLIGENCE

CVE-2020-36932

CVSS score6.1 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2026-01-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

SeaCMS 11.1 contains a stored cross-site scripting vulnerability in the checkuser parameter of the admin settings page. Attackers can inject malicious JavaScript payloads that will execute in users' browsers when the page is loaded.

Weakness classification

  • disclosure@vulncheck.com: CWE-79

Primary references