High severity7.2NVD Advisory· Published May 13, 2026· Updated May 13, 2026

CVE-2020-37222

Description

Kuicms Php EE 2.0 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted content through the bbs reply endpoint. Attackers can send POST requests to /web/?c=bbs&a=reply with HTML and JavaScript payloads in the content parameter to execute arbitrary scripts in users' browsers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Kuicms/Php EEllm-fuzzy
Range: =2.0

Patches

Vulnerability mechanics

References

kuicms.comnvd
kuicms.com/kuicms.zipnvd
www.exploit-db.com/exploits/48526nvd
www.vulncheck.com/advisories/kuicms-php-ee-persistent-cross-site-scripting-via-bbs-replynvd

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000