CVE-2020-23518

Cross Site Scripting XSS vulnerability in UltimateKode Neo Billing - Accounting, Invoicing And CRM Software up to version 3.5 which allows remote attackers to inject arbitrary web script or HTML...

CVE-2020-23518

CVE-2020-23518 is a Cross Site Scripting (XSS) vulnerability in UltimateKode Neo Billing (Envato/Neo Billing) up to version 3.5. The issue allows remote attackers to inject arbitrary web script or HTML, with evidence of stored XSS in the Neo Billing 3.5 release via manipulated fields (e.g., Subje...

Neo Billing 3.5 - Persistent Cross-Site Scripting

Exploit Title: Neo Billing 3.5 - Stored Cross Site Scripting Vulnerability Date: 18.8.2019. Exploit Author: n1x MS-WEB Vendor Homepage: https://codecanyon.net/item/neo-billing-accounting-invoicing-and-crm-software/20896547 Version: 3.5 CWE : CWE-79 CVE: CVE-2020-23518 Description Neo Billing os a...