CVE-2022-39054

CVE-2022-39054 concerns the Cowell enterprise travel management system. The vulnerability is a reflected XSS resulting from insufficient filtering of special characters in web URLs, enabling an unauthenticated remote attacker to inject JavaScript. The provided sources confirm the vulnerability de...

PT-2022-24699 · Unknown · Cowell Enterprise Travel Management System

Name of the Vulnerable Software and Affected Versions: Cowell enterprise travel management system affected versions not specified Description: The issue is related to insufficient filtering for special characters within web URLs, allowing an unauthenticated remote attacker to inject JavaScript an...