CVE-2018-9015

dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdrsn parameter aka the CMS search box...

CVE-2018-9015: Improper Neutralization of Input During Web Page Generation

dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdrsn parameter aka the CMS search box...

PT-2018-18781

Name of the Vulnerable Software and Affected Versions dsmall version v20180320 Description The issue allows for XSS via the pdr sn parameter in the "public/index.php/home/predeposit/index.html" API endpoint, which is also referred to as the CMS search box. Recommendations For version v20180320,...