CVE-2021-31862

CVE-2021-31862 SysAid 20.4.74 allows reflected XSS via the KeepAlive.jsp parameter, without authentication. Timeline Discovered: April 28, 2021 Initial Vendor Contact: April 28, 2021 Reported: April 28, 2021 CVE ID issued: April 28, 2021 Secondary Vendor Contact: Vendor did not reply to initial...