CVE-2020-18132: Mipcms

Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit.

Affected products

• Mipcms Mipcms: version 3.6.0 only

Published 2023-05-08. Last modified 2026-06-17.