1 matches found
Cross site scripting
In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS...