Cross site scripting

A reflected Cross-site Scripting XSS vulnerability exists in OcPortal 9.0.20 via the OCFEMOTICONCELL.tpl FIELDNAME field to data/emoticons.php...

PT-2020-7920

Name of the Vulnerable Software and Affected Versions: OcPortal version 9.0.20 Description: A reflected Cross-site Scripting XSS issue exists via the OCF EMOTICON CELL.tpl FIELD NAME field to "data/emoticons.php". This allows for potential malicious script injection. Recommendations: For OcPortal...

CVE-2015-9549: Improper Neutralization of Input During Web Page Generation

A reflected Cross-site Scripting XSS vulnerability exists in OcPortal 9.0.20 via the OCFEMOTICONCELL.tpl FIELDNAME field to data/emoticons.php...