CVE-2020-37111

MEDIO 6.1CVE-2020-37111 · Published 03/02/2026 · updated 17/06/2026

In breve

CVE-2020-37111 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda 60cyclecms (opensourcecms).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.31%, superiore al 23.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
60cyclecms opensourcecms	`= 2.5.2`	No fix yet

Description

60CycleCMS 2.5.2 contains a cross-site scripting (XSS) vulnerability in news.php that allows attackers to inject malicious scripts through GET parameters. Attackers can craft malicious URLs with XSS payloads targeting the 'etsu' and 'ltsu' parameters to execute arbitrary scripts in victim's browsers. This issue does not involve SQL injection.

References

davidvg.com · Broken Link
exploit-db.com/exploits/48177 · Exploit
opensourcecms.com/60cyclecms · Broken Link
vulncheck.com/advisories/cyclecms-newsphp-cross-site-scripting-xss-vulnerability · Broken Link

Altre vulnerabilità di 60cyclecms

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free