Serpico Cross-Site Scripting Vulnerability (CNVD-2020-03851)

Serpico is a penetration test report generation and collaboration tool. A cross-site scripting vulnerability exists in admin/adduser/UID in Serpico version 1.3.0, which stems from the lack of proper validation of client-side data in a WEB application and can be exploited by an attacker to execute...

PT-2020-10265

Name of the Vulnerable Software and Affected Versions Serpico version 1.3.0 Description An issue was discovered in Serpico, allowing stored XSS via the author parameter in the "admin/add user/UID" endpoint. Recommendations For Serpico version 1.3.0, avoid using the author parameter in the...