4 matches found
CVE-2019-7661
An issue was discovered in PHPMyWind 5.5. The method parameter of the data/api/oauth/connect.php page has a reflected Cross-site Scripting XSS vulnerability...
CVE-2019-7661
An issue was discovered in PHPMyWind 5.5. The method parameter of the data/api/oauth/connect.php page has a reflected Cross-site Scripting XSS vulnerability...
CVE-2019-7661
An issue was discovered in PHPMyWind 5.5. The method parameter of the data/api/oauth/connect.php page has a reflected Cross-site Scripting XSS vulnerability...
CVE-2019-7661
PHPMyWind 5.5 is affected by a reflected XSS in the data/api/oauth/connect.php endpoint (method parameter). CNVD/NVD describe possible leakage of user cookies; CVSS3 base score 6.1 (MEDIUM). No remediation/fix details are provided in the supplied documents.