6 matches found
CVE-2020-10540
Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules...
Untis WebUntis Cross-Site Scripting Vulnerability
Untis WebUntis is an individual developer's is a tool for schools to publish electronic timetables like students. A cross-site scripting vulnerability exists in Untis WebUntis versions prior to 2020.9.6, which stems from a lack of proper validation of client-side data by the web application. An...
CVE-2020-22453
Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information...
Cross site scripting
Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information...
CVE-2020-10540
Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules...
CVE-2020-10540
Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules...