CVE-2019-11643

Persistent XSS has been found in the OneShield Policy Dragon Core framework before 5.1.10. Remote adversaries can inject malicious JavaScript into textboxes decorated with type string, which is subsequently stored to the applicable data store. This can be exploited remotely by both authenticated...

CVE-2019-11643

The CVE-2019-11643 issue affects the OneShield Policy (Dragon Core) framework prior to 5.1.10. It is a persistent Cross‑Site Scripting (XSS) vulnerability where malicious JavaScript can be injected into textboxes of type string and stored in the data store, enabling remote exploitation by both au...