CVE-2020-12685

XSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0 through 5.11.x allows remote attackers to steal credentials or data via browser JavaScript...

PT-2020-13204

Name of the Vulnerable Software and Affected Versions Interchange versions 4.7.0 through 5.11.x Description The issue allows remote attackers to steal credentials or data via browser JavaScript, specifically through XSS in the admin help system, affecting "admin/help.html" and...

CVE-2020-12685: Improper Neutralization of Input During Web Page Generation

XSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0 through 5.11.x allows remote attackers to steal credentials or data via browser JavaScript...