2 matches found
CVE-2025-9913 Cross Site Scripting: Session Hijacking
JavaScript can be ran inside the address bar via the dashboard "Open in new Tab" Button, making the application vulnerable to session hijacking...
PT-2025-40856
Name of the Vulnerable Software and Affected Versions Dashboard affected versions not specified Description The application is susceptible to session hijacking due to the execution of JavaScript code within the address bar. This is possible through the dashboard's "Open in new Tab" button. This...