CVE-2019-10016

GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring...

CVE-2019-10016

CVE-2019-10016 affects GForge Advanced Server 6.4.4. The vulnerability is a cross-site scripting (XSS) flaw in the commonsearch.php code path, caused by inadequate filtering of user-submitted HTML in the words parameter. An attacker can remotely exploit the flaw by supplying crafted input via the...