CVE-2020-35852
Summary
| CVE | CVE-2020-35852 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-02-23 01:15:00 UTC |
| Updated | 2021-02-26 22:07:00 UTC |
| Description | Chatbox is affected by cross-site scripting (XSS). An attacker has to upload any XSS payload with SVG, XML file in Chatbox. There is no restriction on file upload in Chatbox which leads to stored XSS. |
Risk And Classification
Problem Types: CWE-79
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| My_CVE_References/CVE-2020-35852.md at main · riteshgohil/My_CVE_References · GitHub | MISC | github.com | Exploit, Mitigation, Third Party Advisory |
| Chatbot Software: #1 Rated For Sales And Marketing Teams | MISC | getgist.com | Product |
| All-in-One Email Marketing Automation, Live Chat, & Help Desk Software | MISC | getgist.com | Product |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.