CVE-2018-18416: Improper Neutralization of Input During Web Page Generation

LANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as demonstrated by the sitename parameter to the admin/settings/update URI...

PT-2018-14447

Name of the Vulnerable Software and Affected Versions LANGO Codeigniter Multilingual Script version 1.0 Description The issue concerns a security problem where an attacker can inject malicious code. Specifically, the site name parameter in the "admin/settings/update" API endpoint is vulnerable...