TI-2020-04540 CVE-2020-5570 · GHSA-cmg6-rw28-2jcxCross-site scripting in NI Consulting CO.,Ltd. Sales Force AssistantPriority LOW 26Cross-site scripting vulnerability in Sales Force Assistant version 11.2.48 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00849 · Published 2020-04-28 · No fix listed CWE-79