5 matches found
CVE-2021-34815
CheckSec Canopy before 3.5.2 allows XSS attacks against the login page via the LOGINPAGEDISCLAIMER parameter...
Cross site scripting
CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users...
CVE-2018-9036
CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users...
CVE-2018-9036
CVE-2018-9036 affects CheckSec Canopy 3.x before 3.0.7. The vulnerability is a stored XSS via the Login Page Disclaimer, enabling attacks by low-privileged users against higher-privileged users. The public records describe the issue and its impact, but do not provide a remediation or patch versio...
CVE-2018-9036: Improper Neutralization of Input During Web Page Generation
CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users...