{"id":"CVE-2020-36544","aliases":["EUVD-2020-24020","GHSA-p3q4-3h53-wf34"],"status":"published","title":"SialWeb CMS Search cross site scriting","description":"A vulnerability has been found in SialWeb CMS and classified as problematic. This vulnerability affects unknown code of the component Search Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.","severity":{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0059,"percentile":0.48655,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79","CWE-80"],"published":"2022-06-04T12:35:15Z","modified":"2026-06-17T03:15:42Z","products":[{"vendor":"sialweb","product":"cms"},{"vendor":"sialweb","product":"sialweb_cms"},{"vendor":"statamic","product":"cms"}],"references":[{"url":"https://sialweb.net/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://vuldb.com/?id.159430","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36544"},{"url":"https://github.com/advisories/GHSA-p3q4-3h53-wf34"}],"sources":{"cve":[{"id":"CVE-2020-36544","title":"SialWeb CMS Search cross site scriting","description":"A vulnerability has been found in SialWeb CMS and classified as problematic. This vulnerability affects unknown code of the component Search Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2022-06-04T12:35:15Z","modified":"2025-04-15T14:32:57.365Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-80"],"updated_at":"2026-11-02T14:35:55.128961Z"}],"euvd":[{"id":"EUVD-2020-24020","description":"A vulnerability has been found in SialWeb CMS and classified as problematic. This vulnerability affects unknown code of the component Search Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2022-06-04T12:35:15Z","modified":"2025-04-15T14:32:57Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T20:52:28.823587Z"}],"ghsa":[{"id":"GHSA-p3q4-3h53-wf34","title":"A vulnerability has been found in SialWeb CMS and classified as problematic. This vulnerability...","description":"A vulnerability has been found in SialWeb CMS and classified as problematic. This vulnerability affects unknown code of the component Search Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2022-06-09T00:00:27Z","modified":"2023-01-27T05:04:05Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:42:23.117332Z"}],"nvd":[{"id":"CVE-2020-36544","description":"A vulnerability has been found in SialWeb CMS and classified as problematic. This vulnerability affects unknown code of the component Search Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2022-06-08T09:15:08.34Z","modified":"2026-06-17T03:15:42.44Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-80","CWE-79"],"updated_at":"2026-11-02T14:06:46.951463Z"}]}}