CVE-2020-36012

MediumCVSS 4.8

Published: 27/01/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.56%

43th percentile - higher than 43% of all known CVEs

Summary

A stored XSS vulnerability was found in BDTASK Multi-Store Inventory Management System 1.0. A local admin can inject arbitrary JavaScript code via the Customer Name field.

Risk Assessment

An attacker could hijack user sessions, steal data, or perform other malicious actions within the application context, compromising system confidentiality and integrity.

Recommendation

Update the system to the latest version and implement input validation and encoding for the Customer Name field to prevent script injection.

Original NVD description (English source)

Stored XSS vulnerability in BDTASK Multi-Store Inventory Management System 1.0 allows a local admin to inject arbitrary code via the Customer Name Field.