CVE-2020-26885

An issue was discovered in 2sic 2sxc before 11.22. A XSS vulnerability in the sxcver parameter of dnn/ui.html allows an attacker to craft a malicious URL that executes a JavaScript payload in a victim's browser...

Cross site scripting

An issue was discovered in 2sic 2sxc before 11.22. A XSS vulnerability in the sxcver parameter of dnn/ui.html allows an attacker to craft a malicious URL that executes a JavaScript payload in a victim's browser...

PT-2021-11277

Name of the Vulnerable Software and Affected Versions: 2sic 2sxc versions prior to 11.22 Description: An issue was discovered that allows an attacker to craft a malicious URL, exploiting a XSS vulnerability in the sxcver parameter of "dnn/ui.html", which executes a JavaScript payload in a victim'...

CVE-2020-26885: Improper Neutralization of Input During Web Page Generation

An issue was discovered in 2sic 2sxc before 11.22. A XSS vulnerability in the sxcver parameter of dnn/ui.html allows an attacker to craft a malicious URL that executes a JavaScript payload in a victim's browser...