VYPR

iTop essential

by Combodo

CVEs (1)

  • CVE-2020-11696MedJun 5, 2020
    risk 0.40cvss 6.1epss 0.01

    In Combodo iTop a menu shortcut name can be exploited with a stored XSS payload. This is fixed in all iTop packages (community, essential, professional) in version 2.7.0 and iTop essential and iTop professional in version 2.6.4.