Researchers
Back
Michail Poultsakis
#58836
of 60,594
4.3
Total CVSS
Vulnerabilities
·
1
PT-2012-3026
2012-02-08
4.3
CVE-2012-1027
Openproject
Openproject
The issue is related to a cross-site scripting (XSS) vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the `message` parameter to the "register/account-closed" API endpoint.