CVE-2020-10128: Searchblox

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox products multiple parameters are not sanitized/validate properly which allows an attacker to inject malicious JavaScript.

Affected products

• Searchblox Searchblox: before 9.2.1 (fixed in 9.2.1)

Published 2023-09-05. Last modified 2026-06-17.