The vulnerability of the mb_strpos() function in the Bitrix24 business management service allows a attacker to perform XSS attacks.

The vulnerability of the mbstrpos function in the Bitrix24 business management service is related to the lack of measures taken to neutralize the script injection scenario in web pages. Exploiting this vulnerability allows a remote attacker to execute XSS attacks by embedding HTML tags at the...