CVE-2020-35707: XSS
Published Dec 25, 2020
·Updated
Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen.
Affected Software
1 affected component
Daybydaycrm Daybyday=2.1.0
Event History
Dec 25, 2020
CVE Published
via MITRE·05:24 AM
Data Sourced
via MITRE·05:24 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-35707?
CVE-2020-35707 is classified as a high severity vulnerability due to its potential for stored cross-site scripting (XSS) attacks.
2
How do I fix CVE-2020-35707?
To fix CVE-2020-35707, validate and sanitize user input for the Company Name parameter to prevent XSS injection.
3
Who is affected by CVE-2020-35707?
CVE-2020-35707 affects users of Daybyday version 2.1.0, specifically those utilizing the New Client screen.
4
What type of vulnerability is CVE-2020-35707?
CVE-2020-35707 is a stored cross-site scripting (XSS) vulnerability.
5
What are the consequences of CVE-2020-35707?
Exploitation of CVE-2020-35707 can allow an attacker to execute malicious scripts in the context of the user's browser, potentially leading to data theft or account compromise.