CVE-2020-14014: Naviwebs Navigate CMS

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. The query parameter fid on the resource navigate.php does not perform sufficient data validation and/or encoding, making it vulnerable to reflected XSS.

Affected products

• Naviwebs Navigate CMS: version 2.8 only; version 2.9 only

Published 2020-06-24. Last modified 2026-06-17.