4 matches found
CVE-2017-6812
paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.vote.php id parameter...
Cross site scripting
paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.vote.php id parameter...
CVE-2017-6812
paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.vote.php id parameter...
CVE-2017-6812
MaNGOSWebV4 4.0.8 is affected by a reflected XSS in inc/admin/template_files/admin.vote.php (id parameter). The vulnerability stems from unsanitized input echoed back to the page, enabling arbitrary script execution if a user visits a crafted URL. Affected product is MaNGOSWebV4; no vendor versio...