Exploit for Cross-site Scripting in Jamovi

CVE-2021-28079 - POC Jamovi =1.6.18 is affected by a cros...

CVE-2021-28079

Jamovi =1.6.18 is affected by a cross-site scripting XSS vulnerability. The column-name is vulnerable to XSS in the ElectronJS Framework. An attacker can make a .omv Jamovi document containing a payload. When opened by victim, the payload is triggered...

omv.pt XSS vulnerability

Vulnerable URL: https://www.omv.pt/resultados-de-pesquisa?q=%27%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2494229 VIP...