CVE-2020-35676

BigProf Online Invoicing System before 3.1 fails to correctly sanitize an XSS payload when a user registers using the self-registration functionality. As such, an attacker can input a crafted payload that will execute upon the application's administrator browsing the registered users' list. Once...

PT-2020-17386

Name of the Vulnerable Software and Affected Versions BigProf Online Invoicing System versions prior to 3.1 Description The issue arises from the failure to correctly sanitize an XSS payload when a user registers using the self-registration functionality. This allows an attacker to input a crafte...

CVE-2020-35676: Improper Neutralization of Input During Web Page Generation

BigProf Online Invoicing System before 3.1 fails to correctly sanitize an XSS payload when a user registers using the self-registration functionality. As such, an attacker can input a crafted payload that will execute upon the application's administrator browsing the registered users' list. Once...