CVE-2020-14408

CVE-2020-14408 affects Agentejo Cockpit 0.10.2. A reflected XSS vulnerability arises from insufficient sanitization of the to parameter in the /auth/login route, allowing injection of arbitrary JavaScript into the page content. Impact is described as executing JS in the victim’s browser, potentia...