CVE-2020-36654

GENI Portal contains a cross-site scripting vulnerability in the function no_invocation_id_error (file portal/www/portal/sliceresource.php). The issue arises from manipulating the arguments invocation_id and invocation_user, enabling remote execution of XSS. A patch identified as 39a96fb4b822bd34...