PT-2019-13058

Name of the Vulnerable Software and Affected Versions FeHelper versions prior to 2019-06-20 Description The issue allows arbitrary code execution during a JSON format operation. This can be demonstrated by the input "a":functionconfirm1. Recommendations For FeHelper versions prior to 2019-06-20,...

CVE-2019-12966: Improper Neutralization of Special Elements in Output Used by a Downstream Component

FeHelper through 2019-06-19 allows arbitrary code execution during a JSON format operation, as demonstrated by the "a":functionconfirm1 input...