Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Qool CMS contains multiple persistent cross-site scripting vulnerabilities in several administrative scripts where POST parameters are not properly sanitized before being stored and returned to users. Attackers can inject malicious JavaScript code through parameters like 'title', 'name', 'email', 'username', 'link', and 'task' in endpoints such as addnewtype, addnewdatafield, addmenu, addusergroup, addnewuserfield, adduser, addgeneraldata, and addcontentitem to execute arbitrary scripts in administrator browsers.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-16 | 1 | Disclosure1 |
| 2026-03-17 | 1 | General1 |
CVE Alert: CVE-2013-20006 - Qool - Qool CMS - https://www.redpacketsecurity.com/cve-alert-cve-2013-20006-qool-qool-cms/ #OSINT #ThreatIntel #CyberSecurity #cve-2013-20006 #qool #qool-cms
Post summary
The tweet announces a CVE alert for CVE-2013-20006 in Qool CMS and links to an external page, but provides no additional technical, exploit, or mitigation information.
CVE-2013-20006 Qool CMS contains multiple persistent cross-site scripting vulnerabilities in several administrative scripts where POST parameters are not properly sanitized before b… https://www.cve.org/CVERecord?id=CVE-2013-20006
Post summary
CVE‑2013‑20006 reports multiple persistent XSS flaws in Qool CMS administrative scripts caused by unsanitized POST parameters, as summarized in the CVE record.