TI-2020-14572 CVE-2020-23518 · GHSA-h3pg-gp68-xvvqCross Site Scripting (XSS) vulnerability in UltimateKode Neo Billing - Accounting…Priority LOW 28Cross Site Scripting (XSS) vulnerability in UltimateKode Neo Billing - Accounting, Invoicing And CRM Software up to version 3.5 which allows remote attackers to inject arbitrary web script or HTML.CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.02001 · Published 2021-03-02 · No fix listed CWE-79