PT-2021-19393

Name of the Vulnerable Software and Affected Versions i-doit versions prior to 1.16.0 Description The issue allows remote authenticated attackers to inject arbitrary web script or HTML via vulnerable parameters: C MONITORING CONFIG TITLE, SM2 C MONITORING CONFIG TITLE, C MONITORING CONFIG PATH, S...