OX Appsuite - Cross-Site Scripting

OX App Suite through 7.10.4 allows XSS via the app loading mechanism the PATHINFO to the /appsuite URI. id: CVE-2020-24701 info: name: OX Appsuite - Cross-Site Scripting author: DhiyaneshDk severity: medium description: | OX App Suite through 7.10.4 allows XSS via the app loading mechanism the...

CVE-2020-24701

OX App Suite through 7.10.4 allows XSS via the app loading mechanism the PATHINFO to the /appsuite URI...

CVE-2020-24701

CVE-2020-24701 affects OX App Suite up to version 7.10.4. The issue is a Cross-Site Scripting (XSS) via the app loading mechanism, exploiting PATH_INFO to the /appsuite URI. This allows injection of JavaScript by an attacker, with potential impact including theft of session cookies and actions on...