CVE-2018-8069

QCMS version 3.0 has XSS via the webname parameter to the /backend/system.html URI...

CVE-2018-8069: Improper Neutralization of Input During Web Page Generation

QCMS version 3.0 has XSS via the webname parameter to the /backend/system.html URI...

PT-2018-18415

Name of the Vulnerable Software and Affected Versions: QCMS version 3.0 Description: The issue allows for XSS via the webname parameter to the "/backend/system.html" API endpoint. Recommendations: For QCMS version 3.0, update to a version that includes a fix for this issue, if available. As a...