CVE-2020-36828

A vulnerability was found in DiscuzX up to 3.4-20200818. It has been classified as problematic. Affected is the function show_next_step of the file upload/install/include/install_function.php. The manipulation of the argument uchidden leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 3.4-20210119 is able to address this issue. The name of the patch is 4a9673624f46f7609486778ded9653733020c567. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-258612.

• CWE-79

• https://github.com/codersclub/DiscuzX/commit/4a9673624f46f7609486778ded9653733020c567
• https://vuldb.com/?ctiid.258612
• https://vuldb.com/?id.258612
• https://github.com/codersclub/DiscuzX/commit/4a9673624f46f7609486778ded9653733020c567
• https://vuldb.com/?ctiid.258612
• https://vuldb.com/?id.258612

Published

Mar 31, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36822Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. Co…
• CVE-2020-36823Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. Co…
• CVE-2020-36824Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. Co…
• CVE-2020-36825** UNSUPPORTED WHEN ASSIGNED ** ** DISPUTED ** A vulnerabili…6.3
• CVE-2020-36826A vulnerability was found in AwesomestCode LiveBot. It has b…3.5
• CVE-2020-36827The XAO::Web module before 1.84 for Perl mishandles < and > …5.4
• CVE-2020-36829The Mojolicious module before 8.65 for Perl is vulnerable to…7.5
• CVE-2020-36830A vulnerability was found in nescalante urlregex up to 0.5.0…7.5
• CVE-2020-36831The NextScripts: Social Networks Auto-Poster plugin for Word…6.5
• CVE-2020-36832The Ultimate Membership Pro plugin for WordPress is vulnerab…9.8
• CVE-2020-36833The Indeed Membership Pro plugin for WordPress is vulnerable…6.3
• CVE-2020-36834The Discount Rules for WooCommerce plugin for WordPress is v…6.3