CVE-2018-10097

XSS exists in Domain Trader 2.5.3 via the recoverlogin.php emailaddress parameter...

CVE-2019-17176

Genesys PureEngage Digital eServices 8.1.x allows XSS via HtmlChatPanel.jsp or HtmlChatFrameSet.jsp ActionColor, ClientNickNameColor, Email, email, or emailaddress parameter...

CVE-2018-10097

XSS exists in Domain Trader 2.5.3 via the recoverlogin.php emailaddress parameter...

CVE-2018-10097

CVE-2018-10097 describes a cross-site scripting vulnerability in Domain Trader version 2.5.3, exploitable via the recoverlogin.php email_address parameter. The issue is a client-side/script injection flaw in that input parameter, enabling arbitrary script/HTML to be injected when processed by the...