CVE-2020-28957

2021-10-2220:15:10

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the Customer Add module of Foxlor v0.10.16 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the name, firstname, or username input fields.

CPENameOperatorVersion
froxloreq0.10.0-rc2
froxloreq0.9.28-rc1
froxloreq0.9.34.2
froxloreq0.9.27-rc1
froxloreq0.9.24-rc1
froxloreq0.9.33-rc2
froxloreq0.10.13
froxloreq0.9.35.1
froxloreq0.9.30-rc1
froxloreq0.9.39

Name	Operator	Version
froxlor	eq	0.10.0-rc2
froxlor	eq	0.9.28-rc1
froxlor	eq	0.9.34.2
froxlor	eq	0.9.27-rc1
froxlor	eq	0.9.24-rc1
froxlor	eq	0.9.33-rc2
froxlor	eq	0.10.13
froxlor	eq	0.9.35.1
froxlor	eq	0.9.30-rc1
froxlor	eq	0.9.39