What’s Vulnerable › Vulnerabilities

CVE-2020-13969

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-12-23 · updated 2026-06-17
• Weakness: CWE-79

Description

CRK Business Platform <= 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter. This is path-independent.

Affected products

• Crk Business Platform: through 2019.1

References

• https://github.com/r3naissance/nse/blob/master/http-vuln-cve2020-13969.nse
• https://github.com/r3naissance/nse/blob/master/http-vuln-cve2020-13969.nse

Get alerted when CVE-2020-13969 or the next vulnerability affects your stack