CVE-2020-9390 | BDVDB-2026-148447 Detail

Description#

SquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a dashboard that executed malicious content in iframe or by uploading an SVG that contained a script.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://support.squaredup.com/hc/en-us/articles/360017568258
https://support.squaredup.com/hc/en-us/articles/360019427258-CVE-2020-9390-Stored-cross-site-scripting
https://scomsupport.squaredup.com/hc/en-us/articles/8862922003869-CVE-2020-9390-Stored-cross-site-scripting-Web-Content-and-Visio-tile-

Exploit#

No public exploit known

History#

Version 12021-02-03Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.