PT-2021-10587

Name of the Vulnerable Software and Affected Versions: Screenly screenly-ose all versions Description: The issue is related to a Cross Site Scripting vulnerability in the 'Add Asset' page. It can be exploited via manipulation of the URL field, potentially allowing a remote malicious user to execu...

CVE-2020-21101: Improper Neutralization of Input During Web Page Generation

Cross Site Scriptiong vulnerabilityin Screenly screenly-ose all versions, including v1.8.2 2019-09-25-Screenly-OSE-lite.img, in the 'Add Asset' page via manipulation of a 'URL' field, which could let a remote malicious user execute arbitrary code...