CVE-2022-42991

A stored cross-site scripting XSS vulnerability in Simple Online Public Access Catalog v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Account Full Name field...

PT-2022-26698

Name of the Vulnerable Software and Affected Versions Simple Online Public Access Catalog version 1.0 Description A stored cross-site scripting issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Account Full Name field. Recommendations For...