TI-2020-14429 CVE-2020-23014 · GHSA-9fhr-9xv4-8gjvAPfell 1.4 is vulnerable to authenticated reflected cross-site scripting (XSS) in…Priority LOW 26APfell 1.4 is vulnerable to authenticated reflected cross-site scripting (XSS) in /apiui/command_ through the payloadtypes_callback function, which allows an attacker to steal remote admin/user session and/or adding new…CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00718 · Published 2021-01-22 · No fix listed CWE-79