medium5.4Public exploit code
CVE-2020-23518
Cross Site Scripting (XSS) vulnerability in UltimateKode Neo Billing - Accounting, Invoicing And CRM Software up to version 3.5 which allows remote attackers t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Neo Billing 3.5 - Persistent Cross-Site Scripting2019-08-19 · webapps · php
Impact
Cross Site Scripting (XSS) vulnerability in UltimateKode Neo Billing - Accounting, Invoicing And CRM Software up to version 3.5 which allows remote attackers to inject arbitrary web script or HTML.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ultimatekode | Neo Billing | through 3.5 |