CVE-2023-31297: Improper Neutralization of Input During Web Page Generation

An issue was discovered in SESAMI planfocus CPTO Cash Point & Transport Optimizer 6.3.8.6 718. There is XSS via the Name field when modifying a client...

CVE-2023-31297

SESAMI planfocus CPTO (Cash Point & Transport Optimizer) version 6.3.8.6 718 has a cross‑site scripting (XSS) flaw in the Name field when modifying a client. The root cause is unvalidated input in the Name field that can be used to inject JavaScript. Impact details are limited to XSS; the provide...