CVE-2018-18570

Planon before Live Build 41 is vulnerable to Cross-Site Scripting (XSS). The Nuclei template and related descriptions confirm an XSS flaw in Planon prior to Live Build 41, enabling an attacker to execute arbitrary scripts in a victim’s browser and potentially lead to session hijacking, defacement...