CVE-2020-36978: Froxlor Froxlor Server Management Panel 0.10.16 - Persistent Cross-Site Scripting

Published Jan 27, 2026

Updated

Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules.

Affected Software

1 affected component

Froxlor Froxlor Server Management Panel

Event History

Jan 27, 2026

CVE Published

via MITRE·06:51 PM

Data Sourced

via MITRE·06:51 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-36978?

CVE-2020-36978 is classified as a medium severity vulnerability due to its potential for persistent cross-site scripting attacks.

How do I fix CVE-2020-36978?

To fix CVE-2020-36978, ensure you update to the latest version of the Froxlor Server Management Panel that addresses this vulnerability.

What type of vulnerability is CVE-2020-36978?

CVE-2020-36978 is a persistent cross-site scripting (XSS) vulnerability affecting customer registration input fields.

Who is affected by CVE-2020-36978?

CVE-2020-36978 affects users of Froxlor Server Management Panel version 0.10.16 and below.

What are the potential impacts of CVE-2020-36978?

The potential impacts of CVE-2020-36978 include the ability for attackers to execute malicious scripts in the context of users' browsers.