Design/Logic Flaw

LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx...

CVE-2017-16841

LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx...

CVE-2017-16841

LanSweeper 6.0.100.75 is affected by CVE-2017-16841: an XSS vulnerability via the description parameter to /Calendar/CalendarActions.aspx. The issue enables injection that can be reflected in the user’s browser; CVSS v2 base score 4.3 (MEDIUM) and CVSS v3 base score 6.1 (MEDIUM) with network acce...

CVE-2017-16841

LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx...

PT-2017-14588

Name of the Vulnerable Software and Affected Versions LanSweeper version 6.0.100.75 Description The issue is related to a security problem where an attacker can inject malicious code via the description parameter to the "/Calendar/CalendarActions.aspx" API endpoint. This allows for potential code...

CVE-2017-16841: Improper Neutralization of Input During Web Page Generation

LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx...