CVE-2020-28047

AudimexEE before 14.1.1 is vulnerable to Reflected XSS. If the security parameter unique_error_numbers is not set, remote attackers can inject script/HTML via action, cargo, panel parameters, potentially causing data leakage. Affected product: AudimexEE; vulnerable component/entry points are the ...