CVE-2020-19515

qdPM V9.1 is vulnerable to Cross Site Scripting XSS via qdPM\install\modules\databaseconfig.php...

Cross site scripting

qdPM V9.1 is vulnerable to Cross Site Scripting XSS via qdPM\install\modules\databaseconfig.php...

CVE-2020-19515

qdPM V9.1 is vulnerable to Cross Site Scripting XSS via qdPM\install\modules\databaseconfig.php...

CVE-2020-19515

qdPM 9.1 is vulnerable to Cross-Site Scripting via qdPM\install\modules\database_config.php. The root cause is insufficient validation of user-supplied data in that configuration file, enabling injection of malicious scripts into pages viewed by users. Impact could include data theft, session hij...