CVE-2021-45018: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in Catfish =6.3.0 via a Google search in url:/catfishcms/index.php/admin/Index/addmenu.htmland then the .html file on the website that uses this editor the file suffix is allowed...

PT-2021-24191

Name of the Vulnerable Software and Affected Versions: Catfish versions prior to 6.3.1 Description: A Cross Site Scripting XSS issue exists, allowing potential exploitation via a Google search in the "url:/catfishcms/index.php/admin/Index/addmenu.html" endpoint. This issue can be triggered on the...