CVE-2020-10192

An issue was discovered in Munkireport before 5.3.0.3923. An unauthenticated actor can send a custom XSS payload through the /report/brokenclient endpoint. The payload will be executed by any authenticated users browsing the application. This concerns app/views/listings/default.php...

CVE-2020-10192: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Munkireport before 5.3.0.3923. An unauthenticated actor can send a custom XSS payload through the /report/brokenclient endpoint. The payload will be executed by any authenticated users browsing the application. This concerns app/views/listings/default.php...

PT-2020-11965

Name of the Vulnerable Software and Affected Versions Munkireport versions prior to 5.3.0.3923 Description An issue was discovered that allows an unauthenticated actor to send a custom XSS payload through the "/report/broken client" endpoint. The payload will be executed by any authenticated user...