CVE-2020-23647

n/a / n/a PUBLISHED

Description (CNA)

Cross Site Scripting (XSS) vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/boxbilling/boxbilling/issues/596

ADP enrichment

CVE

No English description supplied.

https://github.com/boxbilling/boxbilling/issues/596

CISA-ADP

No English description supplied.

No references supplied.