Security Advisory

CVE-2020-7809

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-05-15 14:44:03

Last updated 2024-08-04 09:41:01

Assigner krcert

CVSS score 4.4

State PUBLISHED

Description

ALSong 3.46 and earlier version contain a Document Object Model (DOM) based cross-site scripting vulnerability caused by improper validation of user input. A remote attacker could exploit this vulnerability by tricking the victim to open ALSong Album(sab) file.

← Browse all CVEs View on cve.org ↗