CVE-2020-13248: Boolebox

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

BooleBox Secure File Sharing Utility before 4.2.3.0 allows stored XSS via a crafted avatar field within My Account JSON data to Account.aspx.

Affected products

• Boolebox Boolebox: before 4.2.3.0 (fixed in 4.2.3.0)

Published 2020-06-24. Last modified 2026-06-17.