CVE-2020-23647 Information

Description

Cross Site Scripting (XSS) vulnerability in BoxBilling 4.19 4.19.1 4.20 and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form.

Reference

https://github.com/boxbilling/boxbilling/issues/596