PT-2026-41437 · Compo · Composr Cms

Parshwa Bhavsar · Publicado 2026-05-16 · Atualizado 2026-05-16 · CVE-2020-37237

Mitre

CVSS v3.1

6.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Composr CMS 10.0.34 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the banner management interface. Attackers with admin credentials can inject XSS payloads in the Description field of the Add banner functionality, which execute for all website visitors when they access the home page.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2020-37237

Produtos afetados

Composr Cms

Referências · 5

• 🔥 https://exploit-db.com/exploits/49190 · Exploit
• https://compo.sr · Nota
• https://compo.sr/download.htm · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-37237 · Nota de Segurança
• https://vulncheck.com/advisories/composr-cms-persistent-cross-site-scripting-via-banners · Nota