CVE-2020-15221

5.4 mediumEPSS 0.6%

Medium (5.4) in combodo itop. EPSS 0.6% chance of exploitation in the next 30 days.

Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 3.0.0, by modifying target browser local storage, an XSS can be generated in the iTop console breadcrumb. This is fixed in versions 2.7.2 and 3.0.0.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-01-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

combodo:itop

References

https://github.com/Combodo/iTop/security/advisories/GHSA-w6g2-p7pf-7hvw
https://github.com/Combodo/iTop/security/advisories/GHSA-w6g2-p7pf-7hvw

Check your stack JSON