EUVD-2018-11510

Malware in sbrugna...

Cross site scripting

Metinfo 6.1.3 has reflected XSS via the admin/column/move.php langcolumnerr4 parameter...

CVE-2018-19835

CVE-2018-19835 affects MetInfo 6.1.3, with a reflected XSS in the admin/column/move.php parameter lang_columnerr4. The root cause is unsanitized input in that parameter, enabling an attacker to inject arbitrary script/HTML. Documented impact is reflected XSS; CVSS data (NVD) shows MEDIUM overall,...