CVE-2020-13248

BooleBox Secure File Sharing Utility (potentially all versions) allows stored XSS via a crafted avatar field within My Account JSON data to Account.aspx.

Source: CVE-2020-13248