2 matches found
CVE-2015-7349: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the sample feedback.inc file in VASCO DIGIPASS authentication plug-in for Citrix Web Interface allows remote attackers to inject arbitrary web script or HTML via the failmessage parameter...
6.1CVSS6.4AI score0.01322EPSS
SaveExploits1References2
PT-2017-7197
Name of the Vulnerable Software and Affected Versions VASCO DIGIPASS authentication plug-in for Citrix Web Interface affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web...
6.1CVSS0.01322EPSS
SaveExploits1References4
20