Filtered by vendor Kuicms Subscriptions
Filtered by product Kuicms Php Ee Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-37222 1 Kuicms 1 Kuicms Php Ee 2026-05-14 7.2 High
Kuicms Php EE 2.0 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted content through the bbs reply endpoint. Attackers can send POST requests to /web/?c=bbs&a=reply with HTML and JavaScript payloads in the content parameter to execute arbitrary scripts in users' browsers.