CVE-2020-27741: Citadel Webcit

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote attackers to inject arbitrary web script or HTML via multiple pages and parameters. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread.

Affected products

• Citadel Webcit: up to and including 926

Published 2020-10-28. Last modified 2026-06-17.