CVE-2020-35418: XSS
Published Apr 14, 2021
·Updated
Cross Site Scripting (XSS) in the contact page of Group Office CRM 6.4.196 by uploading a crafted svg file.
Affected Software
1 affected component
Group-Office Group Office=6.4.196
Event History
Apr 14, 2021
CVE Published
via MITRE·04:11 PM
Data Sourced
via MITRE·04:11 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-35418?
The severity of CVE-2020-35418 is medium with a severity score of 5.4.
2
How does CVE-2020-35418 affect the Group Office CRM software?
CVE-2020-35418 affects Group Office CRM version 6.4.196.
3
What is the Common Weakness Enumeration (CWE) of CVE-2020-35418?
The Common Weakness Enumeration (CWE) of CVE-2020-35418 is 79.
4
How can I fix the Cross Site Scripting (XSS) vulnerability in Group Office CRM 6.4.196?
To fix the Cross Site Scripting (XSS) vulnerability, update Group Office CRM to a version that does not contain the vulnerability.
5
Where can I find more information about CVE-2020-35418?
You can find more information about CVE-2020-35418 at the following link: [Link](https://fatihhcelik.blogspot.com/2020/12/group-office-crm-stored-xss-via-svg-file.html).