ecotelsuisse.ch Cross Site Scripting vulnerability OBB-1385019

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-15883

CVE-2020-15883 concerns a reflected XSS in the MunkiReport project, specifically in the managedinstalls module prior to version 2.6. The vulnerability arises because the last two URL parameters reporting installed package names and versions can be manipulated to inject arbitrary web script or HTM...