CVE-2020-19511

Name of the Vulnerable Software and Affected Versions Typesetter version 5.1

Description The issue is related to a Cross Site Scripting vulnerability. It is associated with the failure to take measures to protect the structure of web pages, specifically through the className and Description fields in the index.php/Admin/Classes. This could allow a remote attacker to perform cross-site scripting attacks.

Recommendations For Typesetter version 5.1, consider disabling the className and Description fields in index.php/Admin/Classes as a temporary workaround until a patch is available. Restrict access to the index.php/Admin/Classes page to minimize the risk of exploitation. Avoid using the className and Description fields in the affected area until the issue is resolved.