Eventum Cross-Site Scripting Vulnerability (CNVD-2019-39381)

Eventum is a defect tracking system. The system is used to track inbound technical support, organizational tasks, bugs, etc. A cross-site scripting vulnerability exists in the /htdocs/list.php file in Eventum version 3.5.0. The vulnerability stems from the WEB application failing to properly...