Description
Cross Site Scripting (XSS) vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form.
Medium · 6.1
CVE-2020-23647
EUVD-2020-16390GHSA-7562-6p6m-r4fh
Cross Site Scripting (XSS) vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the m…
Published Apr 28, 2023 · Updated Jan 31, 2025 · Assigned by mitre