CVE-2018-8978

CVE-2018-8978 affects Open-AudIT Professional 2.1. A cross-site scripting vulnerability exists where an attacker can inject arbitrary script via a crafted src attribute of an IMG element in a URI. Documents indicate Open-AudIT Professional is vulnerable due to this XSS path; no additional exploit...