CVE-2018-18437

CVE-2018-18437 affects AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in secret/relogoff.aspx exploitable via the Error_Desc parameter, allowing an attacker to inject arbitrary script when the page is rendered. Documented in mul...