PT-2020-16467

Name of the Vulnerable Software and Affected Versions Sage DPW versions prior to 2020 06 002 Description The issue allows unauthenticated users to upload JavaScript files via the expenses claiming functionality, although authentication is required to view the file. This enables an attacker to...