CVE-2020-28047: Web-Audimex Audimexee

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

AudimexEE before 14.1.1 is vulnerable to Reflected XSS (Cross-Site-Scripting). If the recommended security configuration parameter "unique_error_numbers" is not set, remote attackers can inject arbitrary web script or HTML via 'action, cargo, panel' parameters that can lead to data leakage.

Affected products

• Web-Audimex Audimexee: before 14.1.1 (fixed in 14.1.1)

Published 2020-11-05. Last modified 2026-06-17.