Jürgen Haas

Name of the Vulnerable Software and Affected Versions: ECA: Event - Condition - Action versions 0.0.0 through 1.1.12 ECA: Event - Condition - Action versions 2.0.0 through 2.0.16 ECA: Event - Condition - Action versions 2.1.0 through 2.1.7 Description: A Cross-Site Request Forgery (CSRF) issue affects the ECA: Event - Condition - Action module, allowing unauthorized actions to be performed. Recommendations: For versions 0.0.0 through 1.1.12, update to version 1.1.12 or later. For versions 2.0.0 through 2.0.16, update to version 2.0.16 or later. For versions 2.1.0 through 2.1.7, update to version 2.1.7 or later.

The issue is related to improper neutralization of input during web page generation, which can lead to Cross-Site Scripting (XSS) attacks. This allows a remote attacker to conduct XSS attacks.

The issue is related to improper neutralization of input during web page generation, which allows Cross-Site Scripting (XSS). This can be exploited by a remote attacker to conduct cross-site scripting attacks.