Touchbase.ai Project Touchbase.ai — known CVE vulnerabilities

Every CVE whose affected-product data names Touchbase.ai Project Touchbase.ai, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2020-26218 — CVSS 8.0 (high): touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting. The vulnerability allows an attacker to inject HTML payloads which…
• CVE-2020-26221 — CVSS 8.0 (high): touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting (XSS). The vulnerability allows an attacker to send malicious…
• CVE-2020-26219 — CVSS 4.7 (medium): touchbase.ai before version 2.0 is vulnerable to Open Redirect. Impacts can be many, and vary from theft of information and credentials, to…
• CVE-2020-26220 — CVSS 3.5 (low): toucbase.ai before version 2.0 leaks information by not stripping exif data from images. Anyone with access to the uploaded image of other…