Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-26218. PoCs published by Simran Sankhala.
AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in Touchbase.io 1.1.0 via the 'Add User' module, where malicious JavaScript is injected into the 'Name' field and executed when the 'Contacts' page is visited.
Description
touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting. The vulnerability allows an attacker to inject HTML payloads which could result in defacement, user redirection to a malicious webpage/website etc. The issue is patched in version 2.0.
Exploits (1)
This exploit demonstrates a stored XSS vulnerability in Touchbase.io 1.1.0 via the 'Add User' module, where malicious JavaScript is injected into the 'Name' field and executed when the 'Contacts' page is visited.
References (1)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N