Puncsky Touchbase.ai cross-site scripting vulnerability (CNVD-2020-66598)

Puncsky Touchbase.ai is a web platform for interpersonal relationships by Puncsky Individual Developers. A cross-site scripting vulnerability exists in versions prior to touchbase.ai 2.0, which can be exploited by an attacker to send malicious JavaScript code that hijacks a user's cookie session...