Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2020-26218

HTML Injection in touchbase.ai

Description

touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting. The vulnerability allows an attacker to inject HTML payloads which could result in defacement, user redirection to a malicious webpage/website etc. The issue is patched in version 2.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

puncsky touchbase.ai

  • < 2.0affected

References