Medium severity6.4NVD Advisory· Published Jan 26, 2026· Updated Apr 15, 2026

CVE-2020-36954

Description

Xeroneit Library Management System 3.1 contains a stored cross-site scripting vulnerability in the Book Category feature that allows administrators to inject malicious scripts. Attackers can insert a payload in the Category Name field to execute arbitrary JavaScript code when the page is loaded.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Library Management Systemllm-fuzzy
Range: = 3.1
Package: https://wordpress.org/plugins/library-management-system

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/49292nvd
www.vulncheck.com/advisories/xeroneit-library-management-system-add-book-category-stored-xssnvd
xeroneit.netnvd
xeroneit.net/portfolio/library-management-system-lmsnvd

News mentions

No linked articles in our index yet.

cvss	0.416
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000