WS-2017-3787

In “TEAMMATES/teammates”, versions v5.41 to v5.103.01 are vulnerable against XSS as a result of insufficient sanitation in admin email content...

WS-2017-3789

In “TEAMMATES/teammates”, versions prior to v5.93 mishandles target=blank in A elements, which makes it easier for remote attackers to conduct redirection attacks...

WS-2016-7126

In “TEAMMATES/teammates”, versions v5.24 to v5.73 are vulnerable against XSS when converting a CSV into an HTML table...

WS-2016-7125

In “TEAMMATES/teammates”, versions V4.98 to V5.70 are vulnerable against XSS as a result of displaying unsanitized student information...

WS-2016-7124

In “TEAMMATES/teammates”, versions V4.98 to V5.69 are vulnerable to XSS as a result of displaying non sanitized students' info in admin activity log...

WS-2015-0076

In “TEAMMATES/teammates”, versions V5.0.1 to V5.46 are vulnerable to reflected Cross-Site Scripting XSS when student profile validation results are echoed...

WS-2015-0075

In “TEAMMATES/teammates”, versions v4.98 to v5.46 are vulnerable against XSS as a result of unsanitized input on error messages...

WS-2015-0074

In “TEAMMATES/teammates”, versions V4.98 to V5.45 are vulnerable against XSS as a result of displaying unsanitized institute information...

WS-2014-0054

In TEAMMATES/teammates, versions V5.04 to V5.28 are vulnerable against XSS as a result of displaying unsanitized values from the user...

WS-2014-0060

In “TEAMMATES/teammates”, versions prior to v5.07.01 are vulnerable to stored Cross-Site Scripting XSS...

WS-2014-0058

In “TEAMMATES/teammates”, versions V4.98 to V5.00 are vulnerable against XSS as a result of an unsanitized courseId, evalName, teamName, toStudent, fromStudent attributes in SubmissionsDb...

WS-2014-0057

In “TEAMMATES/teammates”, versions V4.98 to V5.00 are vulnerable against XSS as a result of an unsanitized feedbackSessionName, courseId, creatorEmail in FeedbackSessionsDb...

WS-2014-0056

In “TEAMMATES/teammates”, versions V4.98 to V5.00 are vulnerable against XSS as a result of an unsanitized googleId, name, email, institute in AccountsDb.java...

WS-2014-0059

In “TEAMMATES/teammates”, versions V4.98 to V4.100 are vulnerable against XSS as a result of an unsanitized student’s name...

WS-2014-0055

In “TEAMMATES/teammates”, versions V4.98 to V5.00 are vulnerable against XSS as a result of an unsanitized courseId, feedbackSessionName in studentFeedbackResults.jsp...