CVE-2020-37237

Name of the Vulnerable Software and Affected Versions Composr CMS version 10.0.34

Description Authenticated administrators can perform a persistent cross-site scripting attack via the banner management interface. By injecting malicious scripts into the Description field of the Add banner functionality, an attacker can ensure the payload executes for all visitors when they access the home page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.