medium6.1
CVE-2020-13168
SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter.
Impact
SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sysaid | Sysaid On-Premises | Versions 5.0, 5.5.06, 5.6, 6.0.9, 6.5, 7.0 |
| Sysaid | Sysaidsy On-Premises | Version 20.1.11 |