CVE-2020-20363

43th percentile - higher than 43% of all known CVEs

A Cross-Site Scripting (XSS) vulnerability was found in PbootCMS version 2.0.3 in the admin.php file. It allows an attacker to inject malicious JavaScript code into the admin panel.

The risk includes potential session hijacking, data theft, or unauthorized actions in the admin panel through the injected script.

Immediately update PbootCMS to the latest available version that fixes the XSS vulnerability. Additionally, implement input filtering and Content Security Policy headers.