CVE-2018-17090

DonLinkage 6.6.8 contains a stored XSS vulnerability in the modules /pages/bazy/bazy_adresow.php and /pages/proxy/add.php. The issue is triggered by closing a followed by tags, allowing injected script execution. The CVE entries and CNVD/CVE references confirm this XSS in DonLinkage 6.6.8; no p...