Kronos WebTA /ApplicationBanner Stored Cross-Site Scripting Vulnerability

Kronos WebTA is an attendance system. A stored cross-site scripting vulnerability exists in Kronos WebTA /ApplicationBanner, which can be exploited by a remote attacker to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack a user session when malicio...

PT-2020-20176

Name of the Vulnerable Software and Affected Versions Kronos Web Time and Attendance webTA versions 4.1.x through 4.x before 5.0 Description The issue concerns a Stored XSS vulnerability. It can be triggered by setting the Application Banner input field of the "/ApplicationBanner" page as an...