CVE-2020-21993

Name of the Vulnerable Software and Affected Versions: WEMS Limited Enterprise Manager version 2.58

Description: The issue arises from improper sanitization of input passed to the email parameter in a GET request. This can lead to the execution of arbitrary HTML code in a user's browser session, within the context of the affected site.

Recommendations: For WEMS Limited Enterprise Manager version 2.58, consider restricting or sanitizing input to the email parameter to prevent the execution of arbitrary HTML code. As a temporary workaround, avoid using the email parameter in sensitive operations until a proper fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.