CVE-2018-17090

Name of the Vulnerable Software and Affected Versions DonLinkage version 6.6.8

Description An issue was discovered that allows stored XSS attacks. The attack can be triggered by closing a <textarea> tag followed by <script></script> tags in the /pages/bazy/bazy adresow.php and /pages/proxy/add.php modules.

Recommendations For DonLinkage version 6.6.8, as a temporary workaround, consider restricting access to the /pages/bazy/bazy adresow.php and /pages/proxy/add.php modules until a patch is available. Avoid using these modules to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.