1 matches found
Visma Public: SXSS using unsanitized `customer no` in eaccountingprinting.stage.vismaonline.com
The researcher found that the customer no field in customer profile is not properly sanitized enabling html/js codeinjection causing an Stored XSS...