MapOS Stored Cross-Site Scripting Vulnerability

MapOS is a free service order control system based on PHP and MySQL. A cross-site scripting vulnerability exists in /clientes/visualizar in MapOS 3.1.11 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of specially crafted...

PT-2017-14635

Name of the Vulnerable Software and Affected Versions MapOS versions 3.1.11 and earlier Description The issue is related to a Stored Cross-site Scripting XSS vulnerability. It affects the "/clientes/visualizar" API endpoint, allowing remote attackers to inject arbitrary web script or HTML via a...

CVE-2017-16919: Improper Neutralization of Input During Web Page Generation

MapOS 3.1.11 and earlier has a Stored Cross-site Scripting XSS vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter...