PT-2020-14747

Name of the Vulnerable Software and Affected Versions dlf aka Kitodo.Presentation versions prior to 3.1.2 dlf aka Kitodo.Presentation version 2.3.1 and earlier in the 2.x branch Description The issue is related to Cross Site Scripting XSS due to the failure to properly encode URL parameters for...