CVE-2022-48324

Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 pesquisa, 2 data, 3 data2, 4 nome, 5 descricao, 6 idDocumentos, 7 id in file application/controllers/Arquivos.php; 8 senha, 9 nomeCliente, 10 contato, 1...

CVE-2022-48324

CVE-2022-48324 affects Mapos version 4.39.0 and encompasses multiple XSS vulnerabilities affecting numerous input fields across modules (Arquivos.php, Clientes.php, Cobrancas.php, Financeiro.php, Garantias.php, Login.php). The root cause is improper handling/sanitization of user-supplied input, e...