medium5.4Public exploit code
CVE-2020-24963
An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Best Support System 3.0.4 - 'ticket_body' Persistent XSS (Authenticated)2020-11-27 · webapps · php
Impact
An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Appsbd | Best Support System | Version 3.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://ex-mi.ru/exploit/%5B2020-08-23%5D-%5BPHP%5D-best-support-system-v3.0.4.txt
- https://medium.com/%40ex.mi/php-best-support-system-v3-0-4-authenticated-persistent-xss-dfe6d4a06f75
- https://ex-mi.ru/exploit/%5B2020-08-23%5D-%5BPHP%5D-best-support-system-v3.0.4.txt
- https://medium.com/%40ex.mi/php-best-support-system-v3-0-4-authenticated-persistent-xss-dfe6d4a06f75