CVE-2018-7057

RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter...

CVE-2018-7057

CVE-2018-7057 affects RoomWizard before 4.4.x, where an XSS flaw exists in the HelpAction.action pageName parameter. The vulnerability is caused by unsanitized input in the pageName parameter, enabling script injection. The connected records corroborate the vulnerability description, but do not p...