Cross site scripting

A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-21145

Lansweeper 9.1.20.2 is affected by a stored XSS in WebUserActions.aspx (loginlayout action). Attack requires authentication and permissions to change loginlayout; an attacker can craft name/value to bypass sanitization and inject arbitrary JavaScript, which is then executed when users visit the l...

PT-2022-14878

Name of the Vulnerable Software and Affected Versions Lansweeper version 9.1.20.2 Description A stored cross-site scripting issue exists in the WebUserActions.aspx functionality. This can be triggered by a specially-crafted HTTP request, leading to arbitrary Javascript code injection. An attacker...

CVE-2022-21145: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability...