Skip to content
OpenAdvisories
Unscored CVE-2020-13758 EUVD-2020-5977GHSA-wcg2-jvm2-p49v

modules/security/classes/general.post_filter.php/post_filter.php in the Web Application Firewall in Bitrix24 through 20.0.950 allows XSS by…

Published Jun 1, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

modules/security/classes/general.post_filter.php/post_filter.php in the Web Application Firewall in Bitrix24 through 20.0.950 allows XSS by placing %00 before the payload.

References