CVE-2020-26221 Stored Cross Site Scripting in touchbase.ai

High 8.0 Published 11 Nov 2020 Updated 4 Aug 2024

Exploited in the wild: Not known
Fix: None listed

What is CVE-2020-26221?

CVE-2020-26221 is a high-severity vulnerability in puncsky touchbase.ai, published on 11 Nov 2020.

Official description

touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting (XSS). The vulnerability allows an attacker to send malicious JavaScript code which could result in hijacking of the user's cookie/session tokens, redirecting the user to a malicious webpage and performing unintended browser action. The issue is patched in version 2.0.

Weakness: CWE-79

Which versions are affected by CVE-2020-26221?

It affects 1 product.

Products include Touchbase.ai Project Touchbase.ai.

How do I fix CVE-2020-26221?

No fix has been published for CVE-2020-26221 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-26221 being exploited?

There is no known exploitation of CVE-2020-26221 in the wild and no public exploit code.

Sources

Also known as GHSA-v5x4-jpcc-h4rv.