4 matches found
CVE-2017-16841
LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx...
Design/Logic Flaw
LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx...
CVE-2017-16841
LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx...
CVE-2017-16841
LanSweeper 6.0.100.75 is affected by CVE-2017-16841: an XSS vulnerability via the description parameter to /Calendar/CalendarActions.aspx. The issue enables injection that can be reflected in the user’s browser; CVSS v2 base score 4.3 (MEDIUM) and CVSS v3 base score 6.1 (MEDIUM) with network acce...