CVE-2020-36524: Refined Toolkit UI-Image/UI-Button cross site scripting

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-06-07 · updated 2026-06-17
Weakness: CWE-79

Description

A vulnerability was found in Refined Toolkit. It has been rated as problematic. Affected by this issue is some unknown functionality of the component UI-Image/UI-Button. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

Refined Toolkit: 2.2.5

References

https://seclists.org/fulldisclosure/2020/Oct/15
https://vuldb.com/?id.164510
https://seclists.org/fulldisclosure/2020/Oct/15
https://vuldb.com/?id.164510

Get alerted when CVE-2020-36524 or the next vulnerability affects your stack