CVE-2020-36954

Publication date

2026-01-26 17:42:35

Family

VulnCheck

State

PUBLISHED

Description

Xeroneit Library Management System 3.1 contains a stored cross-site scripting vulnerability in the Book Category feature that allows administrators to inject malicious scripts. Attackers can insert a payload in the Category Name field to execute arbitrary JavaScript code when the page is loaded.