PT-2018-11476

Name of the Vulnerable Software and Affected Versions CraftedWeb through 2013-09-24 Description The issue allows for XSS via the e parameter in the "aasp includes/pages/notice.php" endpoint. Recommendations For versions through 2013-09-24, consider restricting access to the "aasp...