PT-2021-14560

Name of the Vulnerable Software and Affected Versions MK-AUTH versions through 19.01 K4.9 Description The issue allows for XSS via the "admin/logs ajax.php" endpoint, specifically through the tipo parameter. An attacker can exploit this to read the centralmka2 session token cookie, which is not s...