CVE-2020-9056

MOYENNE 5.4CVE-2020-9056 · Published 10/04/2020 · updated 17/06/2026

En bref

CVE-2020-9056 est une vulnérabilité MOYENNE (CVSS 5.4) touchant buyspeed (periscopeholdings).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.64%, plus élevée que 50.9% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
buyspeed periscopeholdings	`= 14.5`	No fix yet

Description

Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to store arbitrary JavaScript within the application. This JavaScript is subsequently displayed by the application without sanitization and is executed in the browser of the user, which could possibly cause website redirection, session hijacking, or information disclosure. This vulnerability has been patched in BuySpeed version 15.3.

References

kb.cert.org/vuls/id/660597 · Third Party Advisory
support.buyspeed.com/hc/en-us/articles/360035773831-Buyspeed-15-3-0-Release-Notes · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free