Mario Korth

A problem has been found in soerennb eXtplorer that allows for cross-site scripting. The attack can be launched remotely. It is recommended to upgrade the affected component to address this issue.

An issue was discovered that lacks input validation in the JSON handler of com config, leading to XSS.

An issue was discovered that allows stored XSS due to inadequate checks of the Global Configuration helpurl settings.