PT-2026-41436 · Netart Media · Newslister

Emre Aslan · Publicado 2026-05-16 · Atualizado 2026-05-16 · CVE-2020-37236

NVD

CVSS v3.1

6.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the title parameter in the news addition interface. Attackers can inject JavaScript payloads via the title field in the admin panel that execute when news items are viewed by other users.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2020-37236

Produtos afetados

Newslister

Referências · 4

• 🔥 https://exploit-db.com/exploits/49160 · Exploit
• https://netartmedia.net/newslister.html · Nota
• https://vulncheck.com/advisories/newslister-authenticated-persistent-cross-site-scripting-via-admin-panel · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-37236 · Nota de Segurança