CVE-2020-24992: Cmswing

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when an administrator accesses the content management module.

Affected products

• Cmswing Cmswing: version 1.3.7 only

Published 2021-05-17. Last modified 2026-06-17.