cve/2020/CVE-2020-28945.md
2024-06-18 02:51:15 +02:00

686 B

CVE-2020-28945

Description

OX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature, such as ![](http://onerror=Function.constructor, in a Notes item.

POC

Reference

Github

No PoCs found on GitHub currently.