CVE-2022-23165: Improper Neutralization of Input During Web Page Generation

Sysaid – Sysaid 14.2.0 Reflected Cross-Site Scripting XSS - The parameter "helpPageName" used by the page "/help/treecontent.jsp" suffers from a Reflected Cross-Site Scripting vulnerability. For an attacker to exploit this Cross-Site Scripting vulnerability, it's necessary for the affected produc...

PT-2022-15892

Name of the Vulnerable Software and Affected Versions Sysaid version 14.2.0 Description The parameter helpPageName used by the page "/help/treecontent.jsp" suffers from a Reflected Cross-Site Scripting issue. To exploit this, the affected product must expose the Offline Help Pages. An attacker ma...