2 matches found
Cross site scripting
An unauthenticated Cross-Site Scripting XSS vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST controller parameter...
5.8CVSS5.9AI score0.01199EPSS
SaveExploits1References1Affected Software1
CVE-2023-36287: Improper Neutralization of Input During Web Page Generation
An unauthenticated Cross-Site Scripting XSS vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST controller parameter...
6.1CVSS6.3AI score0.01199EPSS
SaveExploits1References2
20