CVE-2020-36139

CVE-2020-36139 affects BloofoxCMS 0.5.2.1. The vulnerability is a reflected XSS via the fileurl parameter, caused by unsanitized input that’s reflected in the page. Exploitation details are not provided in the documents; no in-the-wild exploit status is stated. Impact is consistent with a browser...