CVE-2020-14073

XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can create a map, and then use the Map Designer Properties screen to insert JavaScript code. This can be exploited against any user with View Maps or Edit Maps access.

• CWE-79

• http://packetstormsecurity.com/files/160312/PRTG-Network-Monitor-20.4.63.1412-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://gist.github.com/alert3/e058baa33c31695f4168a1dbf77103dfExploit, Third Party Advisory
• https://kb.paessler.com/en/topic/88223-what-s-the-open-vulnerability-report-cve-2020-14073-that-my-security-tracker-informed-me-aboutVendor Advisory
• https://www.paessler.com/prtg/history/stableRelease Notes, Vendor Advisory
• http://packetstormsecurity.com/files/160312/PRTG-Network-Monitor-20.4.63.1412-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://gist.github.com/alert3/e058baa33c31695f4168a1dbf77103dfExploit, Third Party Advisory
• https://kb.paessler.com/en/topic/88223-what-s-the-open-vulnerability-report-cve-2020-14073-that-my-security-tracker-informed-me-aboutVendor Advisory
• https://www.paessler.com/prtg/history/stableRelease Notes, Vendor Advisory

Published

Jun 23, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-14068An issue was discovered in MK-AUTH 19.01. The web login func…9.8
• CVE-2020-14069An issue was discovered in MK-AUTH 19.01. There are SQL inje…6.8
• CVE-2020-1407A remote code execution vulnerability exists when the Window…7.8
• CVE-2020-14070An issue was discovered in MK-AUTH 19.01. There is authentic…9.8
• CVE-2020-14071An issue was discovered in MK-AUTH 19.01. XSS vulnerabilitie…6.1
• CVE-2020-14072An issue was discovered in MK-AUTH 19.01. It allows command …9.8
• CVE-2020-14074TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-…8.8
• CVE-2020-14075TRENDnet TEW-827DRU devices through 2.06B04 contain multiple…8.8
• CVE-2020-14076TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-…8.8
• CVE-2020-14077TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-…8.8
• CVE-2020-14078TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-…8.8
• CVE-2020-14079TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-…8.8