CVE-2022-39054

CVE-2022-39054 concerns the Cowell enterprise travel management system. The vulnerability is a reflected XSS resulting from insufficient filtering of special characters in web URLs, enabling an unauthenticated remote attacker to inject JavaScript. The provided sources confirm the vulnerability de...

CVE-2022-39054: Improper Neutralization of Input During Web Page Generation

Cowell enterprise travel management system has insufficient filtering for special characters within web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS Reflected Cross-Site Scripting attack...

PT-2022-24699 · Unknown · Cowell Enterprise Travel Management System

Name of the Vulnerable Software and Affected Versions: Cowell enterprise travel management system affected versions not specified Description: The issue is related to insufficient filtering for special characters within web URLs, allowing an unauthenticated remote attacker to inject JavaScript an...