CVE-2020-36524

MOYENNE 5.4CVE-2020-36524 · Published 07/06/2022 · updated 17/06/2026

En bref

CVE-2020-36524 est une vulnérabilité MOYENNE (CVSS 5.4) touchant refined toolkit (refined).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.60%, plus élevée que 48.7% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
refined toolkit refined	`= 2.2.5`	No fix yet

Description

A vulnerability was found in Refined Toolkit. It has been rated as problematic. Affected by this issue is some unknown functionality of the component UI-Image/UI-Button. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

References

seclists.org/fulldisclosure/2020/Oct/15 · Exploit
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free