VulnerabilityModified

CVE-2020-23618

A reflected cross site scripting (XSS) vulnerability in Xtend Voice Logger 1.0 allows attackers to execute arbitrary web scripts or HTML, via the path of the error page.

MEDIUM 6.1EPSS 0.57%

Does this matter?

Lower severity and a low EPSS score (0.57%). Track it; it rarely justifies an emergency change on its own.

Description

A reflected cross site scripting (XSS) vulnerability in Xtend Voice Logger 1.0 allows attackers to execute arbitrary web scripts or HTML, via the path of the error page.

CVSS 3.1: 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.57% probability · 47th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-79
Affected: xtendtech/voice logger
Source: cve@mitre.org

EPSS trend

EPSS 0.6% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

References

http://www.xtendtech.com/voicelogger/index.htmProduct
https://gist.github.com/fuzzKitty/3f62b37b8fc44ee996d3f07442f9a3a2Third Party Advisory
http://www.xtendtech.com/voicelogger/index.htmProduct
https://gist.github.com/fuzzKitty/3f62b37b8fc44ee996d3f07442f9a3a2Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.