CVE-2018-8737: Improper Neutralization of Input During Web Page Generation

Bookme Control Panel 2.0 Application is vulnerable to stored XSS within the Customers "Book Me" function. Within the Name and Note aka custName and custNote sections of the Customers screen, the application does not sanitize user-supplied input and renders injected JavaScript code to the user's...

PT-2018-18609

Name of the Vulnerable Software and Affected Versions Bookme Control Panel version 2.0 Description The issue concerns a stored XSS vulnerability within the Customers function, specifically in the Name and Note sections, referred to as custName and custNote. The application fails to sanitize...