CVE-2020-27576: Maxum Rumpus

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS). Users are able to create folders in the web application. The folder name is insufficiently validated resulting in a stored cross-site scripting vulnerability.

Affected products

• Maxum Rumpus: version 8.2.13 only; version 8.2.14 only

Published 2021-03-08. Last modified 2026-07-09.