CVE-2020-28092: PESCMS Team 2.3.2 has multiple reflected XSS via the id parameter:?g=Team&m=Task&a=my&status=3&id=,?g=Team&...

Security readout for executives and security teams

CVE-2020-28092 is a reflected cross-site scripting issue reported in PESCMS Team 2.3.2. A crafted value in the listed id parameter could cause script content to run in a user’s browser. Business impact depends on who can reach those task pages and what privileges affected users have. Likely exposure is limited to organizations running PESCMS Team 2.3.2 with the listed task routes reachable by users. The CVE record’s affected-product metadata is incomplete, so confirm exposure by inventory rather than CPE matching alone. Handle during normal vulnerability remediation unless the application is internet-facing or used by privileged staff. Escalate priority if PESCMS Team handles sensitive data, supports administrators, or is exposed to untrusted users. Mitigation focus: Check PESCMS Team project guidance for a fixed version or official workaround.; Upgrade only to a release confirmed to address this issue.; Sanitize and context-encode reflected id values if maintaining custom code..

Prepared

Jun 3, 2026, 04:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.