CVE-2017-6540

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data configs passed to the webpagetest-master/www/benchmarks/compare.php URL. An attacker could execute arbitrary HTML and script code in a browse...

CVE-2017-6540

CVE-2017-6540 affects webpagetest 3.0, with XSS due to insufficient filtration of user-supplied data (configs) passed to webpagetest-master/www/benchmarks/compare.php. The vulnerability allows an attacker to cause arbitrary HTML/script execution in a victim’s browser in the context of the affecte...

CVE-2017-6540

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data configs passed to the webpagetest-master/www/benchmarks/compare.php URL. An attacker could execute arbitrary HTML and script code in a browse...