Security Advisory

CVE-2020-23647

6.1
MEDIUM

Vulnerability Description

Cross Site Scripting (XSS) vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form.
Published Date April 28, 2023
Official Source NIST NVD Advisory