CVE-2020-9055 — Versiant Lynx Customer Service Portal version 3.5.2 is vulnerable to stored cross-site scripting, which may allow an a…

CVE-2020-9055

Versiant Lynx Customer Service Portal version 3.5.2 is vulnerable to stored cross-site scripting, which may allow an attacker to execute arbitrary JavaScript PUBLISHED

Description (CNA)

Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or information disclosure.

Affected (CNA)

Vendor / product	Versions
Versiant / LYNX Customer Service Portal	affected 3.5.2

CWE

CWE-79

References

https://kb.cert.org/vuls/id/962085/
https://csp.poha.com/lynx/

ADP enrichment

CVE

No English description supplied.

https://kb.cert.org/vuls/id/962085/
https://csp.poha.com/lynx/