CVE-2021-36450: Improper Neutralization of Input During Web Page Generation

Verint Workforce Optimization WFO 15.2.8.10048 allows XSS via the control/mynotifications NEWUINAV parameter...

PT-2021-21272

Name of the Vulnerable Software and Affected Versions Verint Workforce Optimization WFO version 15.2.8.10048 Description The issue allows for cross-site scripting XSS attacks. This is possible due to the NEWUINAV parameter in the "control/my notifications" API endpoint. Recommendations For versio...

CVE-2021-41825: Improper Neutralization of Input During Web Page Generation

Verint Workforce Optimization WFO 15.2.5.1033 allows HTML injection via the /wfo/control/signin username parameter...

CVE-2020-13480: Improper Neutralization of Input During Web Page Generation

Verint Workforce Optimization WFO 15.2 allows HTML injection via the "send email" feature...

PT-2020-13564

Name of the Vulnerable Software and Affected Versions Verint Workforce Optimization WFO version 15.2 Description The issue allows HTML injection via the "send email" feature. This could potentially lead to malicious activities such as phishing or cross-site scripting XSS attacks, where an attacke...