PT-2026-5001 · Froxlor · Froxlor Froxlor Server Management Panel

Vulnerability-Lab · Published 2026-01-27 · Updated 2026-01-27 · CVE-2020-36978

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Froxlor Server Management Panel version 0.10.16

Description A persistent cross-site scripting issue exists in the customer registration input fields. This allows attackers to inject malicious scripts using the username, name, and firstname parameters, which are then executed when administrators view customer traffic modules.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-36978

Affected Products

Froxlor Froxlor Server Management Panel

References · 8

• 🔥 https://exploit-db.com/exploits/49063 · Exploit
• https://vulnerability-lab.com/show.php?user=Vulnerability-Lab · Vendor Advisory
• https://vulnerability-lab.com/show.php?user=Benjamin%20K.M. · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-36978 · Security Note
• https://vulnerability-lab.com/get_content.php?id=2241 · Vendor Advisory
• https://vulncheck.com/advisories/froxlor-froxlor-server-management-panel-persistent-cross-site-scripting · Note
• https://froxlor.org/download · Note
• https://froxlor.org · Note