CVE-2020-25491

CVE-2020-25491 affects 6Kare Emakin 5.0.341.0. The vulnerability is a Cross Site Scripting (XSS) flaw in the DisplayName field of /rpc/membership/setProfile, which is mishandled when rendering the Activity Stream page. Root cause stated: improper handling during rendering. Exploitation details an...