AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico Cross-Site Scripting Vulnerability

AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico is a cloud-based software, also available as an app, which, in addition to the standardized corporate management, also has specialized functions for the management of the learning process, with the goal of supporting the management of teachers...

PT-2018-14462

Name of the Vulnerable Software and Affected Versions AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico version 1.7.0 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is possible due to the presence of a flaw in the "secret/relogoff.aspx"...