PT-2017-18607

Name of the Vulnerable Software and Affected Versions Invision Power Services IPS Community Suite versions 4.1.19.2 and earlier Description The issue concerns a pre-auth reflected XSS in the IPS UTF8 Converter v1.1.18. The attack vector is the "admin/convertutf8/index.php?controller=" endpoint...