What’s Vulnerable › Vulnerabilities

CVE-2020-11541

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-05-08 · updated 2026-06-17
• Weakness: CWE-611

Description

In TechSmith SnagIt 11.2.1 through 20.0.3, an XML External Entity (XXE) injection issue exists that would allow a local attacker to exfiltrate data under the local Administrator account.

Affected products

• Techsmith Snagit: from 11.2.1 through 20.0.3

References

• https://support.techsmith.com/hc/en-us/articles/115006435067-Snagit-Windows-Version-History
• https://support.techsmith.com/hc/en-us/articles/115006435067-Snagit-Windows-Version-History

Get alerted when CVE-2020-11541 or the next vulnerability affects your stack