WS-2022-0294

In corebos, reflected XSS due to bad sanitization of "idstring" parameter in cbSurvey module...

Reflected XSS in "cbSurvey" module

Description Reflected XSS due to bad sanitization of "idstring" parameter in cbSurvey module. Proof of Concept https://demo.corebos.com/index.php?module=cbSurvey&action=cbSurveyAjax&file=MassEdit&mode=ajax&idstring=" onfocus=javascript:alertdocument.domain type=txt autofocus="...