CVE-2019-13346

In MyT 1.5.1, the Userusername parameter has XSS...

CVE-2019-13346

CVE-2019-13346 affects MyT Project Management 1.5.1. The issue is a stored XSS in the User[username] parameter during user creation (POST /myt-1.5.1/user/create). Root cause is input handling allowing script code to be persisted and potentially executed in other users’ contexts. Exploitation has ...

MyT Project Management 1.5.1 - User[username] Persistent Cross-Site Scripting

MyT Project Management 1.5.1 - Userusername Persistent Cross-Site Scripting Exploit Title: MyT Project Management - Userusername Stored Cross Site Scripting Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://manageyourteam.net/index.html Software Link:...