Description
In Combodo iTop a menu shortcut name can be exploited with a stored XSS payload. This is fixed in all iTop packages (community, essential, professional) in version 2.7.0 and iTop essential and iTop professional in version 2.6.4.
Unscored
CVE-2020-11696
EUVD-2020-4038
In Combodo iTop a menu shortcut name can be exploited with a stored XSS payload. This is fixed in all iTop packages (community, essential, …
Published Jun 5, 2020 · Updated Aug 4, 2024 · Assigned by mitre