Cross site scripting

Static Persistent XSS Vulnerability exists in version 4.3.0 of Yclas when using the install/view/form.php script. An attacker can store XSS in the database through the vulnerable SITENAME parameter...

CVE-2021-38710: Improper Neutralization of Input During Web Page Generation

Static Persistent XSS Vulnerability exists in version 4.3.0 of Yclas when using the install/view/form.php script. An attacker can store XSS in the database through the vulnerable SITENAME parameter...

PT-2021-22271

Name of the Vulnerable Software and Affected Versions Yclas version 4.3.0 Description A Static Persistent XSS issue exists when using the install/view/form.php script. An attacker can store XSS in the database through the vulnerable SITE NAME parameter. Recommendations For Yclas version 4.3.0, as...