CVE-2020-28365

CVE-2020-28365 affects Sentrifugo 3.2. A stored XSS can be triggered by inserting a payload into the X-Forwarded-For header during login; when an administrator views logs, the payload is executed. Several connected sources corroborate that this vulnerability originates in the login flow and is re...