← CVE Intelligence

CVE-2020-10128

SearchBlox product before V-9.2.1 is vulnerable to Stored-Cross Site Scripting PUBLISHED

Description (CNA)

SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox products multiple parameters are not sanitized/validate properly which allows an attacker to inject malicious JavaScript.

Affected (CNA)

Vendor / productVersions
SearchBlox / SearchBloxaffected 0 before 9.2.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.