CVE-2020-6583

BigProf Online Invoicing System (OIS) through 2.6 has XSS that can be leveraged for session hijacking

published January 8, 2020

CVSS
—
EPSS
1%
Percentile
52.1
In the wild
Unconfirmed
What it is

BigProf Online Invoicing System (OIS) through 2.6 has XSS that can be leveraged for session hijacking. An attacker can exploit the XSS vulnerability, retrieve the session cookie from the administrator login, and take over the administrator account via the Name field in an Add New Client action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00686 · 52.1th percentile
Published
2020-01-08T19:06Z
EPSS history
Timeline
  • 08 JAN 19:06Z
    BigProf Online Invoicing System (OIS) through 2.6 has XSS that can be leveraged for session hijacking
    cvelistv5