CVE-2020-37014: Tryton 5.4 - Persistent Cross-Site Scripting

Published Jan 30, 2026

Updated

Tryton 5.4 contains a persistent cross-site scripting vulnerability in the user profile name input that allows remote attackers to inject malicious scripts. Attackers can exploit the vulnerability by inserting script payloads in the name field, which execute in the frontend and backend user interfaces.

Affected Software

1 affected component

tryton Tryton

Event History

Jan 30, 2026

CVE Published

via MITRE·04:16 PM

Data Sourced

via MITRE·04:16 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeakness

Jun 18, 58335

Event

via NVD·05:02 AM

Frequently Asked Questions

What is the severity of CVE-2020-37014?

CVE-2020-37014 is classified as a medium severity persistent cross-site scripting vulnerability.

How do I fix CVE-2020-37014?

To fix CVE-2020-37014, you should update to the latest version of Tryton that addresses this vulnerability.

What are the potential impacts of CVE-2020-37014?

The potential impacts of CVE-2020-37014 include unauthorized script execution and data theft through cross-site scripting attacks.

Who is affected by CVE-2020-37014?

CVE-2020-37014 affects users of Tryton 5.4 due to its vulnerable user profile name input field.

Can CVE-2020-37014 be exploited remotely?

Yes, CVE-2020-37014 can be exploited remotely by attackers who inject malicious scripts into the name field.