PT-2021-10135

Name of the Vulnerable Software and Affected Versions: Indexhibit version 2.1.5 Description: A reflected cross-site scripting XSS issue in the "/plugin/ajax.php" component allows attackers to execute arbitrary web scripts or HTML. This can be exploited through the API endpoint "/plugin/ajax.php"...

CVE-2020-18125: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the /plugin/ajax.php component of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML...