| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-13247 | 8.5 |
BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area.
|
10-02-2021 - 20:47 | 24-06-2020 - 20:15 | |
| CVE-2020-13248 | 3.5 |
BooleBox Secure File Sharing Utility before 4.2.3.0 allows stored XSS via a crafted avatar field within My Account JSON data to Account.aspx.
|
10-02-2021 - 20:41 | 24-06-2020 - 19:15 |
