CVE-2023-1715

A logic error when using mbstrpos to check for potential XSS payload in Bitrix24 22.0.300 allows attackers to bypass XSS sanitisation via placing HTML tags at the begining of the payload...

CVE-2023-1715

A logic error when using mbstrpos to check for potential XSS payload in Bitrix24 22.0.300 allows attackers to bypass XSS sanitisation via placing HTML tags at the begining of the payload...

CVE-2023-1715

CVE-2023-1715 affects Bitrix24 22.0.300. A logic error in mb_strpos() used to detect potential XSS payload allows bypassing XSS sanitisation by placing HTML tags at the beginning of the payload. The connected PT-2023-6693 documentation confirms Bitrix24 22.0.300 and suggests mitigation steps (e.g...

Bitrix24 Cross-Site Scripting Vulnerability

Bitrix24 is a suite of enterprise social platforms from Bitrix USA. The platform includes features such as online communication, calendar management and CRM Customer Relationship Management. A security vulnerability exists in Bitrix24 version 22.0.300, which stems from a cross-site scripting XSS...