An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24963
Reference (s):
- https://ex-mi.ru/exploit/[2020-08-23]-[PHP]-best-support-system-v3.0.4.txt
- https://medium.com/@ex.mi/php-best-support-system-v3-0-4-authenticated-persistent-xss-dfe6d4a06f75

