SABBATIC app cross-site scripting vulnerability

Versions prior to 7.96.0.1 and 7.96.0.2 of the SABBATIC app contain a cross-site scripting vulnerability. This vulnerability stems from improper handling of the ‘nombre’ parameter in the /usuario endpoint, making it susceptible to stored cross-site scripting attacks. As a result, attackers can...

SABBATIC app cross-site scripting vulnerability

Versions prior to 7.96.0.1 and 7.96.0.2 of the SABBATIC app contain a cross-site scripting vulnerability. This vulnerability stems from improper handling of the companyName parameter in the /empresa endpoint, potentially enabling stored cross-site scripting attacks. Attackers can store JavaScript...

SABBATIC app cross-site scripting vulnerability

Versions prior to 7.96.0.1 and 7.96.0.2 of the SABBATIC app contain a cross-site scripting vulnerability. This vulnerability stems from improper handling of input in the “observaciones” parameter on the /mis-gastos endpoint, potentially allowing stored cross-site scripting attacks. Attackers can...

SABBATIC app cross-site scripting vulnerability

Versions prior to 7.96.0.1 and 7.96.0.2 of the SABBATIC app contain a cross-site scripting vulnerability. This vulnerability stems from stored XSS in the tituloes and addetiquetas%5B%5D parameters within the /categorías endpoint; attackers can store JavaScript code that is executed in the victim’...

SABBATIC app cross-site request forgery vulnerability

Versions prior to 7.96.0.1 and prior to 7.96.0.2 of the SABBATIC app contain a cross-site request forgery vulnerability. This vulnerability arises from cross-site request forgery, allowing attackers to trick authenticated users into clicking malicious links or loading pages, thereby sending...