Medium severity6.1NVD Advisory· Published May 15, 2020· Updated Jun 17, 2026

CVE-2020-12685

Description

XSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0 through 5.11.x allows remote attackers to steal credentials or data via browser JavaScript.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/Interchange
cpe:2.3:a:redhat:interchange:*:*:*:*:*:*:*:*
Range: >=4.7.0,<5.12.0
Interchange/Interchangedescription
Interchange Development Group/Interchangellm-create
Range: 4.7.0 - 5.11.x

Patches

Vulnerability mechanics

References

www.interchangecommerce.org/i/dev/newsnvdPatchVendor Advisory
www.interchangecommerce.orgnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000