PT-2022-25361 · Kfm · Kfm

Name of the Vulnerable Software and Affected Versions: kfm versions through 1.4.7 Description: A cross-site scripting XSS issue exists, allowing for the execution of malicious scripts via a crafted GET request to the "/kfm/index.php" API endpoint. Recommendations: For versions through 1.4.7, upda...