CVE-2017-10711

CVE-2017-10711 affects SimpleRisk 20170614-001. The vulnerability is a CSRF on reset.php (Send Password Reset Email form) that can inject XSS sequences via the user parameter. Impact is partial integrity of stored or reflected data, with the ability to run injected scripts in contexts where the f...