23 matches found
Cross site scripting
Special characters of IGT search function in igt+ are not filtered in specific fields, which allow remote authenticated attackers can inject malicious JavaScript and carry out DOM-based XSS Cross-site scripting attacks...
CVE-2021-32544
CVE-2021-32544 relates to Intelligent Global Technology Ltd. igt+ where the search function fails to filter special characters in certain fields, enabling remote authenticated attackers to inject malicious JavaScript and perform DOM-based XSS. The vulnerability is described as DOM-based XSS with ...