CVE-2020-35419

Cross Site Scripting XSS in Group Office CRM 6.4.196 via the SETLANGUAGE parameter...

CVE-2020-35419

Cross Site Scripting XSS in Group Office CRM 6.4.196 via the SETLANGUAGE parameter...

CVE-2020-35419

Group Office CRM 6.4.196 is affected by a Cross Site Scripting (XSS) vulnerability exploitable via the SET_LANGUAGE parameter. The issue is documented across multiple sources (NVD, Red Hat, CNVD, OSV, etc.) with the same vector, indicating the vulnerability resides in the handling of the SET_LANG...