PT-2022-19999

Name of the Vulnerable Software and Affected Versions WBCE CMS version 1.5.2 Description The issue is related to Cross Site Scripting XSS via the "adminpagessections save.php" endpoint, specifically the namesection2 parameter. This allows for potential malicious script injection. Recommendations...