CVE-2019-18207: Improper Neutralization of Input During Web Page Generation

In Zucchetti InfoBusiness before and including 4.4.1, an authenticated user can inject client-side code due to improper validation of the Title field in the InfoBusiness Web Component. The payload will be triggered every time a user browses the reports page...

PT-2019-15276

Name of the Vulnerable Software and Affected Versions Zucchetti InfoBusiness versions prior to 4.4.2 Description The issue allows an authenticated user to inject client-side code due to improper validation of the Title field in the InfoBusiness Web Component. This code injection is triggered ever...