TI-2021-14772 Aliases CVE-2021-36454 GHSA-gh7r-jpw7-q393

Cross Site Scripting (XSS) vulnerability in Naviwebs Navigate Cms 2.9 via the…

LOW 25CWE-79Published 2021-08-06 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: Low
User interaction: Required
Attack complexity: Low
Impact type: Cross-site scripting
Confidentiality · integrity · availability: Low · Low · None
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Cross Site Scripting (XSS) vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse parameter to 1) backups\backups.php, 2) blocks\blocks.php, 3) brands\brands.php, 4) comments\comments.php, 5) coupons\coupons.php, 6) feeds\feeds.php, 7) functions\functions.php, 8) items\items.php, 9) menus\menus.php, 10) orders\orders.php, 11) payment_methods\payment_methods.php, 12) products\products.php, 13) profiles\profiles.php, 14) shipping_methods\shipping_methods.php, 15) templates\templates.php, 16) users\users.php, 17) webdictionary\webdictionary.php, 18) websites\websites.php, and 19) webusers\webusers.php because the initial_url function is built in these files.

Why it matters now

EPSS 0.00552 46th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:naviwebs:navigate_cms:2.9:::::::*	2.9	Vulnerable	Naviwebs

cpe:2.3:a:naviwebs:navigate_cms:2.9:*:*:*:*:*:*:* Versions 2.9 Vulnerable ·Naviwebs

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2021-36454
2026-10-03 Alias added: GHSA-gh7r-jpw7-q393

References

Exploit 1

https://github.com/NavigateCMS/Navigate-CMS/issues/24

Advisory 1

https://www.navigatecms.com/en/blog/development/navigate_cms_update_2_9_4

TI-2018-12501 SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass… CVSS 3.0CRITICAL 9.8
TI-2018-12502 An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in… CVSS 3.0HIGH 8.8
TI-2020-19188 Navigate CMS 2.8.7 - ''sidx' SQL Injection CVSS 4.0HIGH 7.1
TI-2020-19189 Navigate CMS 2.8.7 - Cross-Site Request Forgery CVSS 4.0MEDIUM 5.1
TI-2020-14650 SQL Injection vulnerability in NavigateCMS 2.9 via the URL encoded GET input category in navigate.php. CVSS 3.1CRITICAL 9.8
TI-2022-10922 A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows… CVSS 3.1MEDIUM 4.9

See all 21 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences