CVE-2017-6878: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name2 parameter to admin/column/delete.php...

PT-2017-17391

Name of the Vulnerable Software and Affected Versions MetInfo version 5.3.15 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the name 2 parameter to "admin/column/delete.php" API endpoint. Recommendations For MetInfo versio...