CVE-2020-36007: Appcms

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

AppCMS 2.0.101 in /admin/template/tpl_app.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users.

Affected products

• Appcms Appcms: version 2.0.101 only

Published 2021-06-03. Last modified 2026-06-17.