medium6.1
CVE-2020-35249
Cross Site Scripting (XSS) vulnerability in ElkarBackup 1.3.3, allows attackers to execute arbitrary code via the name parameter to the add client feature.
Impact
Cross Site Scripting (XSS) vulnerability in ElkarBackup 1.3.3, allows attackers to execute arbitrary code via the name parameter to the add client feature.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elkarbackup | Elkarbackup | Version 1.3.3 |