CVE-2020-36524

MEDIO 5.4CVE-2020-36524 · Published 07/06/2022 · updated 17/06/2026

In breve

CVE-2020-36524 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda refined toolkit (refined).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.60%, superiore al 48.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
refined toolkit refined	`= 2.2.5`	No fix yet

Description

A vulnerability was found in Refined Toolkit. It has been rated as problematic. Affected by this issue is some unknown functionality of the component UI-Image/UI-Button. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

References

seclists.org/fulldisclosure/2020/Oct/15 · Exploit
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free