CVE-2017-6560

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=XSS&editObjId=XSS attack...

CVE-2017-6560: Improper Neutralization of Input During Web Page Generation

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=XSS&editObjId=XSS attack...

PT-2017-17158

Name of the Vulnerable Software and Affected Versions Agora-Project version 3.2.2 Description The issue is related to a cross-site scripting XSS attack. The attack can be performed using the "index.php?ctrl=misc&action=XSS&editObjId=XSS" endpoint, where action and editObjId are vulnerable...