CVE-2020-25399 – Stored XSS in InterMind iMind Server through 3.13.65 allows any user to h

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user’s session by sending a malicious file in the chat.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25399

Reference (s):

• https://github.com/h3llraiser/CVE-2020-25399