CVE-2020-36608

A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file admin_organizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is dfd0afacb26c3682a847bea7b49ea440b63f3baa. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-212816.

• CWE-707
• CWE-79

• https://github.com/TribalSystems/Zenario/commit/dfd0afacb26c3682a847bea7b49ea440b63f3baaPatch, Third Party Advisory
• https://vuldb.com/?id.212816Third Party Advisory
• https://github.com/TribalSystems/Zenario/commit/dfd0afacb26c3682a847bea7b49ea440b63f3baaPatch, Third Party Advisory
• https://vuldb.com/?id.212816Third Party Advisory

Published

Nov 2, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36601Out-of-bounds write vulnerability in the kernel modules. Suc…7.5
• CVE-2020-36602There is an out-of-bounds read and write vulnerability in so…6.1
• CVE-2020-36603The HoYoVerse (formerly miHoYo) Genshin Impact mhyprot2.sys …6.5
• CVE-2020-36604hoek before 8.5.1 and 9.x before 9.0.3 allows prototype pois…8.1
• CVE-2020-36605Incorrect Default Permissions vulnerability in Hitachi Infra…4.4
• CVE-2020-36607Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 a…6.1
• CVE-2020-36609A vulnerability was found in annyshow DuxCMS 2.1. It has bee…5.4
• CVE-2020-3661Buffer overflow will happen while parsing mp4 clip with corr…9.8
• CVE-2020-36610A vulnerability was found in annyshow DuxCMS 2.1. It has bee…8
• CVE-2020-36611Incorrect Default Permissions vulnerability in Hitachi Tunin…7.1
• CVE-2020-36615An out-of-bounds read was addressed with improved bounds che…7.8
• CVE-2020-36617A vulnerability was found in ewxrjk sftpserver. It has been …9.8