CVE-2020-36931 - Click2Magic 1.1.5 - Stored Cross-Site Scripting

CVE ID : CVE-2020-36931 Published : Jan. 25, 2026, 12:24 p.m. | 39 minutes ago Description : Click2Magic 1.1.5 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts in the chat name input. Attackers can craft a malicious payload in the chat name to capture administrator cookies when the admin processes user requests. Severity: 6.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...