CVE-2020-27576

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS). Users are able to create folders in the web application. The folder name is insufficiently validated resulting in a stored cross-site scripting vulnerability.

• CWE-79

• https://tvrbk.github.io/cve/2021/03/07/rumpus.htmlThird Party Advisory
• https://tvrbk.github.io/cve/2021/03/07/rumpus.htmlThird Party Advisory

Published

Mar 8, 2021

Last Modified

Jul 9, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27560ImageMagick 7.0.10-34 allows Division by Zero in OptimizeLay…3.3
• CVE-2020-27568Insecure File Permissions exist in Aviatrix Controller 5.3.1…7.5
• CVE-2020-27569Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and…7.5
• CVE-2020-2757Vulnerability in the Java SE, Java SE Embedded product of Or…3.7
• CVE-2020-27574Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site req…8.8
• CVE-2020-27575Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command inje…8.8
• CVE-2020-2758Vulnerability in the Oracle VM VirtualBox product of Oracle …8.2
• CVE-2020-27583IBM InfoSphere Information Server 8.5.0.0 is affected by des…9.8
• CVE-2020-27585Quick Heal Total Security before 19.0 allows attackers with …4.4
• CVE-2020-27586Quick Heal Total Security before version 19.0 transmits quar…5.9
• CVE-2020-27587Quick Heal Total Security before 19.0 allows attackers with …6.7
• CVE-2020-27589Synopsys hub-rest-api-python (aka blackduck on PyPI) version…7.5