2 matches found
CVE-2020-23647
Cross Site Scripting XSS vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form...
6.1CVSS0.00514EPSS
SaveExploits1References1
CVE-2020-23647: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form...
6.1CVSS6.2AI score0.00514EPSS
SaveExploits1References3
20