PT-2019-19888

Name of the Vulnerable Software and Affected Versions VFront version 0.99.5 Description The issue concerns a Reflected XSS that can be triggered via specific parameters in certain PHP files. Specifically, the descrizione g parameter in the "admin/menu registri.php" file or the azzera parameter in...

PT-2019-19887

Name of the Vulnerable Software and Affected Versions VFront version 0.99.5 Description The issue concerns a stored XSS that occurs via the azzera parameter in the "admin/sync reg tab.php" page, which is mishandled during the rendering of "admin/error log.php". Recommendations For VFront version...