CVE-2020-35852

CVE-2020-35852 concerns a stored cross-site scripting (XSS) flaw in Chatbox. The vulnerability arises when an attacker uploads an SVG or XML payload without restrictions, allowing the injected script to persist in Chatbox content. Affected component: file upload/input handling in Chatbox (no vend...