CVE-2020-29072: Inclusion of Functionality from Untrusted Control Sphere

A Cross-Site Script Inclusion vulnerability was found on LiquidFiles before 3.3.19. This client-side attack requires user interaction opening a link and successful exploitation could lead to encrypted e-mail content leakage via messages/sent?format=js and popup?format=js...

PT-2020-17091

Name of the Vulnerable Software and Affected Versions LiquidFiles versions prior to 3.3.19 Description A Cross-Site Script Inclusion issue was found, which is a client-side attack that requires user interaction, such as opening a link. Successful exploitation could lead to encrypted e-mail conten...