2 matches found
WS-2022-0313
Reflected XSS on "DetailViewAjax" via "relationid" parameter in tsolucio/corebos...
6.1CVSS5.8AI score
SaveExploits0References1
Reflected XSS on "DetailViewAjax" via "relation_id" parameter
Description The value of the "relationid" parameter on the "DetailViewAjax" reflects to the source code without any sanitization. So, that leads to XSS which allows cookie stealing. Proof of Concept...
1.5AI score
SaveExploits0
20