CVE-2020-11696

In Combodo iTop a menu shortcut name can be exploited with a stored XSS payload

published June 5, 2020

CVSS
—
EPSS
1%
Percentile
52.0
In the wild
Unconfirmed
What it is

In Combodo iTop a menu shortcut name can be exploited with a stored XSS payload. This is fixed in all iTop packages (community, essential, professional) in version 2.7.0 and iTop essential and iTop professional in version 2.6.4.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00685 · 52.0th percentile
Published
2020-06-05T21:12Z
EPSS history
Timeline
  • 05 JUN 21:12Z
    In Combodo iTop a menu shortcut name can be exploited with a stored XSS payload
    cvelistv5