← All advisories

Medium severity5.4NVD Advisory· Published Apr 14, 2021· Updated Jun 17, 2026

CVE-2020-35418

CVE-2020-35418

Description

Cross Site Scripting (XSS) in the contact page of Group Office CRM 6.4.196 by uploading a crafted svg file.

Affected products

3

Intermesh/Group Office
cpe:2.3:a:group-office:group_office:6.4.196:*:*:*:*:*:*:*
Group Office/Group Office CRMdescription
Intermesh/Group Office CRMllm-create
Range: = 6.4.196

Patches

Vulnerability mechanics

References

1

fatihhcelik.blogspot.com/2020/12/group-office-crm-stored-xss-via-svg-file.htmlnvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.