Approved changes feed: RSS · Atom

cpe:2.3:a:netartmedia:newslister:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetartmedia (58a3ef90-e69b-54c1-8939-90cfe9ede906)
ProductNewslister (f675bec3-e8cf-5fc8-8e36-73db51b86d54)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-37236 vulnerable 2026-06-03 14:42:41.055067 NewsLister Authenticated Persistent Cross-Site Scripting via Admin Panel
MEDIUM (6.4)
NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the title parameter in the news addition interface. Attackers can inject JavaScript payloads via the title field in the admin panel that execute when news items are viewed by other users.
Published: 2026-05-16T15:25:52.992Z
Updated: 2026-05-24T01:36:57.591Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.