PT-2026-53206 · Gotohttp · Gotohttp
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
GotoHTTP versions prior to 10.3
Description
Remote attackers can initiate cross site scripting by manipulating the
sn argument during the processing of the /reg.12x file. Cross site scripting is a technique where malicious scripts are injected into trusted websites.Recommendations
Update to version 10.3 or later.
As a temporary mitigation, restrict access to the
/reg.12x file.Exploit
Fix
XSS
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Gotohttp