CVEvulnerability
CVE-2020-35852
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-02-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Chatbox is affected by cross-site scripting (XSS). An attacker has to upload any XSS payload with SVG, XML file in Chatbox. There is no restriction on file upload in Chatbox which leads to stored XSS.
Affected configurations
• getgist chatbox 1.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://getgist.com Product
- https://getgist.com/chatbot-software/ Product
- https://github.com/riteshgohil/My_CVE/blob/main/CVE-2020-35852.md Exploit, Mitigation, Third Party Advisory
- https://getgist.com Product
- https://getgist.com/chatbot-software/ Product
- https://github.com/riteshgohil/My_CVE/blob/main/CVE-2020-35852.md Exploit, Mitigation, Third Party Advisory