CVE-2019-17189

totemodata 3.0.0b936 has XSS via a folder name...

CVE-2019-17189

Totemo totemodata 3.0.0_b936 is affected by a Cross-Site Scripting (XSS) vulnerability in the WEB application, caused by a lack of proper validation of client-side data in a folder name. The issue is documented across multiple sources (CNVD, NVD, Red Hat context) as CVE-2019-17189. Exploitation d...