Kronos WebTA "com.threeis.webta.H261configMenu" servlet cross-site scripting vulnerability

Kronos WebTA is an attendance system. A cross-site scripting vulnerability exists in the Kronos WebTA "com.threeis.webta.H261configMenu" servlet, which can be exploited by an attacker to inject malicious script or HTML code, which can be used to gain access to sensitive information or hijack a...

CVE-2020-8493

A stored XSS vulnerability in Kronos Web Time and Attendance webTA affects 3.8.x and later 3.x versions before 4.0 via multiple input fields Login Message, Banner Message, and Password Instructions of the com.threeis.webta.H261configMenu servlet via an authenticated administrator...