CVE-2020-36498

The CVE-2020-36498 entry concerns Macrob7 Macs Framework Content Management System (CMS) v1.14f. A cross-site scripting (XSS) vulnerability exists in the account reset function, allowing an attacker to execute arbitrary web scripts or HTML via a crafted payload in the email input field. The issue...