CVE-2020-24701

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

OX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_INFO to the /appsuite URI).

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jan 12, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-247038.8An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an attacker-controlled serCVE-2020-247046.1An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager 2.2.0, API Manager AnalyticCVE-2020-247058.8An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an attacker-controlled serCVE-2020-247066.1An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager through 3.1.0, API Manager CVE-2020-247077.8Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content.CVE-2020-247085.4Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the Host field on the send profile form.CVE-2020-247095.4Cross Site Scripting (XSS) vulnerability in Gophish through 0.10.1 via a crafted landing page or email template.CVE-2020-247105.3Gophish before 0.11.0 allows SSRF attacks.CVE-2020-247116.5The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking attaCVE-2020-247125.4Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page.CVE-2020-247137.5Gophish through 0.10.1 does not invalidate the gophish cookie upon logout.CVE-2020-247149.8The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without t
CVE-2020-24701: Medium severity, CVSS 6.1 | Vulnix