CVE-2019-14804

studio/polyglot.php?page=etemplates in UNA 10.0.0-RC1 allows XSS via the System Name field under Emails during template editing...

CVE-2019-14804

The CVE-2019-14804 issue affects UNA 10.0.0-RC1, where a stored Cross-Site Scripting (XSS) vulnerability exists in studio/polyglot.php?page=etemplates via the Emails templates when editing the System Name field. The root cause, as described by CNVD, is a lack of proper validation of client-side d...