Security Advisory
CVE-2020-23647
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Cross Site Scripting (XSS) vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form.