CVE-2021-31674: Improper Neutralization of Input During Web Page Generation

Cyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote unauthenticated attacker to execute javascript code via undefine enum constant...

PT-2022-10044

Name of the Vulnerable Software and Affected Versions Cyclos 4 PRO versions 4.14.7 and before Description The issue allows a remote unauthenticated attacker to execute javascript code via an undefined enum constant due to a lack of user input validation at error inform. Recommendations For Cyclos...