What is CVE-2020-36544?

CVE-2020-36544 is a low-severity vulnerability in Sialweb Cms, classified under Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS). CVSS score: 3.5/10. Published 2022-06-08.

How severe is CVE-2020-36544?

Low severity. CVSS v3 base score is 3.5 out of 10.

XSS in Sialweb Cms

CVE-2020-36544

A vulnerability has been found in SialWeb CMS and classified as problematic. This vulnerability affects unknown code of the component Search Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

EPSS: 0.006 (42.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N.

Affected products

Sialweb Cms — versions n/a
Sialweb Sialweb_cms

Weakness classification (CWE)

References

cna@vuldb.com (x_refsource_MISC, Vendor Advisory)
cna@vuldb.com (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-36544?: CVE-2020-36544 is a low-severity vulnerability in Sialweb Cms, classified under Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS). CVSS score: 3.5/10. Published 2022-06-08.
How severe is CVE-2020-36544?: Low severity. CVSS v3 base score is 3.5 out of 10.