medium6.1
CVE-2020-23647
Cross Site Scripting (XSS) vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the …
Impact
Cross Site Scripting (XSS) vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Boxbilling | Boxbilling | Versions 4.19, 4.19.1, 4.20, 4.21 |