QSAN Storage Manager <3.3.3 - Cross-Site Scripting Detection

QSAN Storage Manager before 3.3.3 contains a reflected cross-site scripting vulnerability. Header page parameters do not filter special characters. Remote attackers can inject JavaScript to access and modify specific data. !/usr/bin/env python3 -- coding: utf-8 -- """QSAN Storage Manager before...

PT-2021-21581

Name of the Vulnerable Software and Affected Versions QSAN Storage Manager affected versions not specified Description The issue concerns a lack of filtering for special characters in the QSAN Storage Manager header page parameters. This allows remote attackers to inject JavaScript without loggin...

CVE-2021-37216: Improper Neutralization of Input During Web Page Generation

QSAN Storage Manager header page parameters does not filter special characters. Remote attackers can inject JavaScript without logging in and launch reflected XSS attacks to access and modify specific data...