CVE-2020-37237

MEDIUM

Composr CMS 10.0.34 Persistent Cross-Site Scripting via banners

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2020-37237 has a selected CVSS score of 5.1 (medium); EIP currently links 1 catalogued exploit.

Description

Composr CMS 10.0.34 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the banner management interface. Attackers with admin credentials can inject XSS payloads in the Description field of the Add banner functionality, which execute for all website visitors when they access the home page.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 18, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Composr CMS

Browse Compo / Composr CMS
CVE List10.0.34affected

Proofs of concept

1

Catalogued exploits

ExploitDBComposr CMS 10.0.34 - 'banners' Persistent Cross Site ScriptingExploitDB exploitby Parshwa BhavsarNot analyzed1 file
ExploitDB
PoC details

References

5