CVE-2020-35698

Thinkific Thinkific Online Course Creation Platform 1.0 is affected by: Cross Site Scripting (XSS). The impact is: execute arbitrary code (remote). The component is: Affected Source code of the website CMS which is been used by many to host their online courses using the Thinkific Platform. The attack vector is: To exploit the vulnerability any user has to just visit the link - https://hacktify.thinkific.com/account/billing?success=%E2%80%AA%3Cscript%3Ealert(1)%3C/script%3E. ¶¶ Thinkific is a Website based Learning Platform Product which is used by thousands of users worldwide. There is a Cross Site Scripting (XSS) based vulnerability in the code of the CMS where any attacker can execute a XSS attack. Proof of Concept & Steps to Reproduce: Step1 : Go to Google.com Step 2 : Search for this Dork site:thinkific.com -www Step 3 : You will get a list of websites which are running on the thinkific domains. Step 4 : Create account and signin in any of the website Step 5 : Add this endpoint at the end of the domain and you will see that there is a XSS Alert /account/billing?success=%E2%80%AA<script>alert(1)</script> Step 6 : Choose any domains from google for any website this exploit will work on all the websites as it is a code based flaw in the CMS Step 7 : Thousands of websites are vulnerable due to this vulnerable code in the CMS itself which is giving rise to the XSS attack.

• CWE-79
• CWE-79

• https://medium.com/%40rohitgautam26/cve-2020-35698-a922189c42ef
• https://medium.com/%40rohitgautam26/cve-2020-35698-a922189c42ef

Published

Jul 25, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-35684An issue was discovered in HCC Nichestack 3.0. The code that…7.5
• CVE-2020-35685An issue was discovered in HCC Nichestack 3.0. The code that…9.1
• CVE-2020-35686The SECOMN service in Sound Research DCHU model software com…7.8
• CVE-2020-35687PHPFusion version 9.03.90 is vulnerable to CSRF attack which…4.3
• CVE-2020-3569Multiple vulnerabilities in the Distance Vector Multicast Ro…8.6
• CVE-2020-35693On some Samsung phones and tablets running Android through 7…8.8
• CVE-2020-35700A second-order SQL injection issue in Widgets/TopDevicesCont…8.8
• CVE-2020-35701An issue was discovered in Cacti 1.2.x through 1.2.16. A SQL…8.8
• CVE-2020-35702DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a…7.8
• CVE-2020-35704Daybyday 2.1.0 allows stored XSS via the Title parameter to …5.4
• CVE-2020-35705Daybyday 2.1.0 allows stored XSS via the Name parameter to t…5.4
• CVE-2020-35706Daybyday 2.1.0 allows stored XSS via the Title parameter to …5.4