Puncsky Touchbase.ai
4 CVEs affecting Puncsky Touchbase.ai. Latest disclosed: 2020-11-11. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-26221 | High | 8.0 | 2020-11-11 | touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting (XSS). The vulnerability allows an attacker to send malicious JavaScript code which could… |
CVE-2020-26218 | High | 8.0 | 2020-11-11 | touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting. The vulnerability allows an attacker to inject HTML payloads which could result in defac… |
CVE-2020-26219 | Medium | 4.7 | 2020-11-11 | touchbase.ai before version 2.0 is vulnerable to Open Redirect. Impacts can be many, and vary from theft of information and credentials, to the redirection to… |
CVE-2020-26220 | Low | 3.5 | 2020-11-11 | toucbase.ai before version 2.0 leaks information by not stripping exif data from images. Anyone with access to the uploaded image of other users could obtain i… |