PT-2020-14099
CVE-2020-14973
·
تاريخ النشر
2020-06-22
·
تاريخ التحديث
2020-06-25
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
webTareas version 2.0p8
Description
The issue concerns a Reflected Cross Site Scripting (XSS) vulnerability. This occurs via the query string in the loginForm within the general/login.php webpage.
Recommendations
For webTareas version 2.0p8, consider validating and sanitizing user input in the query string to prevent XSS attacks. As a temporary workaround, restrict access to the general/login.php webpage until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾