CVE-2019-14804
studio/polyglot.php?page=etemplates in UNA 10.0.0-RC1 allows XSS via the System Name field under Emails during template editing.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
studio/polyglot.php?page=etemplates in UNA 10.0.0-RC1 allows XSS via the System Name field under Emails during template editing.
Références
- advisory packetstormsecurity.com
- advisory github.com
- advisory pastebin.com