CVE-2019-14471

TestLink 1.9.19 has XSS via the error.php message parameter...

CVE-2019-14471

CVE-2019-14471 affects TestLink 1.9.19 and is a cross-site scripting (XSS) vulnerability via the error.php message parameter. Public data in the connected documents confirms the affected software/version and the root cause as improper handling of the error message leading to script injection. CVS...