Cross site scripting

A stored cross site scripting XSS vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insufficient validation and sanitization of data input into the user creation and editing form fields. The product name is SAS Web Administration interface SASAdmin. F...

CVE-2023-24724: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insufficient validation and sanitization of data input into the user creation and editing form fields. The product name is SAS Web Administration interface SASAdmin. F...

PT-2023-19749

Name of the Vulnerable Software and Affected Versions SAS Web Administration interface SASAdmin versions 9.4 M2 through 9.4 M2 SAS release versions 9.4 TS1M2 through 9.4 TS1M2 Description A stored cross site scripting XSS vulnerability was discovered in the user management module of the SAS 9.4...