PT-2017-17158

Name of the Vulnerable Software and Affected Versions Agora-Project version 3.2.2 Description The issue is related to a cross-site scripting XSS attack. The attack can be performed using the "index.php?ctrl=misc&action=XSS&editObjId=XSS" endpoint, where action and editObjId are vulnerable...