CVE-2020-20426

MediumCVSS 6.1

Published: 22/12/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.65%

47th percentile - higher than 47% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability was found in S-CMS Government Station Building System v5.0 in the /function/booksave.php file. It allows an attacker to inject malicious client-side scripts.

Risk Assessment

An attacker can exploit this vulnerability to steal user sessions, redirect to malicious sites, or steal sensitive data.

Recommendation

Update the system to the latest version and implement input filtering and encoding in the /function/booksave.php file.

Original NVD description (English source)

S-CMS Government Station Building System v5.0 contains a cross-site scripting (XSS) vulnerability in /function/booksave.php.