Skip to content
OpenAdvisories

Archive

9 June 2020

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2020-13973 Public exploit

    Cross-site scripting in json-sanitizer

    OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls another substring adjacent to a SCRIPT element in which the output is embedded as JavaScript, may be able to confuse the HTML parser as to where…

  • Medium 6.3
    CVE-2020-13965 Exploited Public exploit EPSS 77%

    An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML att…

    KEV Jun 26, 2024