CVE-2020-35852

CVSS 3.1: 6.1 medium
EPSS: 1%p66
Published: Feb 23, 2021 · Feb 23, 2021
Modified: Jun 17, 2026

Analyze CVE-2020-35852 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Chatbox is affected by cross-site scripting (XSS). An attacker has to upload any XSS payload with SVG, XML file in Chatbox. There is no restriction on file upload in Chatbox which leads to stored XSS.

Vendors: getgist

Products: chatbox

Weakness: CWE-79

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news

1 story

File Transfer Threats: Risk Factors and How Network Traffic Visibility Can Help

Palo Alto Unit 42Jun 6, 12:43 UTC · Jun 6, 2024VulnerabilityCVE-2021-24144 CVE-2021-24142 CVE-2021-25277+72