CVE-2020-21656

CVE-2020-21656 is a stored XSS in XYHCMS v3.6, affecting the endpoint xyhai.php?s=/Link/index. The root cause is insufficient input validation in that component, enabling client-side code execution. No exploitation details are provided in the supplied documents.