What’s Vulnerable › Vulnerabilities

CVE-2020-36826: AwesomestCode LiveBot parseMessage.js parseSend cross site scripting

• Severity: low (CVSS 3.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-25 · updated 2026-06-17
• Weakness: CWE-79

Description

A vulnerability was found in AwesomestCode LiveBot. It has been classified as problematic. Affected is the function parseSend of the file js/parseMessage.js. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Upgrading to version 0.1 is able to address this issue. The name of the patch is 57505527f838d1e46e8f93d567ba552a30185bfa. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-257784.

Affected products

• AwesomestCode LiveBot: all versions

References

• https://github.com/AwesomestCode/LiveBot/commit/57505527f838d1e46e8f93d567ba552a30185bfa
• https://github.com/AwesomestCode/LiveBot/releases/tag/0.1
• https://vuldb.com/?ctiid.257784
• https://vuldb.com/?id.257784
• https://github.com/AwesomestCode/LiveBot/commit/57505527f838d1e46e8f93d567ba552a30185bfa
• https://github.com/AwesomestCode/LiveBot/releases/tag/0.1
• https://vuldb.com/?ctiid.257784
• https://vuldb.com/?id.257784

Get alerted when CVE-2020-36826 or the next vulnerability affects your stack