CVE-2020-36498

https://notcve.org/view.php?id=CVE-2020-36498

Macrob7 Macs Framework Content Management System - 1.14f contains a cross-site scripting (XSS) vulnerability in the account reset function, which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the e-mail input field. Macrob7 Macs Framework Content Management System versión 1.14f, contiene una vulnerabilidad de tipo cross-site scripting (XSS) en la función account reset, que permite a atacantes ejecutar scripts web o HTML arbitrarios por medio de una carga útil diseñada en el campo de entrada e-mail • https://www.vulnerability-lab.com/get_content.php?id=2206 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •