Cross site scripting

2020-10-1920:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.8%

JSON

Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. An attacker can send arbitrary JavaScript code via a built-in communication channel, such as Telegram, WhatsApp, Viber, Skype, Facebook, Vkontakte, or Odnoklassniki. This is mishandled within the administration panel for conversations/all, conversations/inbox, conversations/unassigned, and conversations/closed.

CPENameOperatorVersion
blingereq1.0.2519

CPE	Name	Operator	Version
	blinger	eq	1.0.2519

References

blinger.io/

github.com/Security-AVS/CVE-2019-13633