Description
Spiceworks Version <= 7.5.00107 is affected by XSS. Any name typed on Custom Groups function is vulnerable to stored XSS as they displayed on http://127.0.0.1/inventory/groups/ without output sanitization.
Unscored
CVE-2020-23450
EUVD-2020-16197GHSA-qv5f-p8rc-6j2q
Spiceworks Version <= 7.5.00107 is affected by XSS. Any name typed on Custom Groups function is vulnerable to stored XSS as they displayed …
Published Sep 1, 2020 · Updated Jul 9, 2026 · Assigned by mitre