CVE-2020-35852

creationtimestamp| type| source ---|---|--- 2021-02-23 07:34:20+00:00| seen| https://t.me/cibsecurity/23970 2023-12-18 02:04:26+00:00| seen| https://t.me/arpsyndicate/1888...

CVE-2020-35852

Chatbox is affected by cross-site scripting XSS. An attacker has to upload any XSS payload with SVG, XML file in Chatbox. There is no restriction on file upload in Chatbox which leads to stored XSS...

CVE-2020-35852

CVE-2020-35852 concerns a stored cross-site scripting (XSS) flaw in Chatbox. The vulnerability arises when an attacker uploads an SVG or XML payload without restrictions, allowing the injected script to persist in Chatbox content. Affected component: file upload/input handling in Chatbox (no vend...