← All advisories

Medium severity6.1NVD Advisory· Published Apr 14, 2021· Updated Jun 17, 2026

CVE-2020-35419

CVE-2020-35419

Description

Cross Site Scripting (XSS) in Group Office CRM 6.4.196 via the SET_LANGUAGE parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Intermesh/Group Office
cpe:2.3:a:group-office:group_office:6.4.196:*:*:*:*:*:*:*
Group Office/Group Office CRMdescription
Intermesh/Group Office CRMllm-create
Range: <6.4.196

Patches

Vulnerability mechanics

References

1

fatihhcelik.github.io/posts/Group-Office-CRM-Stored-XSS-via-SVG-File/nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.