VDB
CVE-2020-9056
CVE-2020-9056
PUBLISHED
CVSS 3.9000000953674316 LOW
Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to store arbitrary JavaScript within the application. This JavaScript is subsequently displayed by the application without sanitization and is executed in the browser of the user, which could possibly cause website redirection, session hijacking, or information disclosure. This vulnerability has been patched in BuySpeed version 15.3.
EPSS 0.30% · 54.0th percentile
Risk Scores
CVSS 3.1
3.9000000953674316
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
EPSS Score
0.30%
54.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Periscope Holdings | BuySpeed | 14.5 |
| periscopeholdings | buyspeed | 14.5 |
Timeline
- Apr 10, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 4, 2022 EPSS Score