CVE-2020-25399 - Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat

HIGH

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat

Published Nov 5, 2020

7.8

HIGH

CVSS 3.1

EPSS 1.02%

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

https://github.com/h3llraiser/CVE-2020-25399
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/h3llraiser/CVE-2020-25399		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Nov 5, 2020

Updated Aug 4, 2024

Reserved Sep 14, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a