EUVD-2020-14759

Malware in sbrugna...

CVE-2020-21993

In WEMS Limited Enterprise Manager 2.58, input passed to the GET parameter 'email' is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site...

Design/Logic Flaw

In WEMS Limited Enterprise Manager 2.58, input passed to the GET parameter 'email' is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site...

CVE-2020-21993

CVE-2020-21993 is a reflected cross-site scripting vulnerability in WEMS Limited Enterprise Manager 2.58. It arises from the GET parameter email not being properly sanitized before being echoed back to the user, enabling arbitrary HTML to execute in a victim’s browser in the context of the affect...

CVE-2020-21993

In WEMS Limited Enterprise Manager 2.58, input passed to the GET parameter 'email' is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site...

PT-2021-10708

Name of the Vulnerable Software and Affected Versions: WEMS Limited Enterprise Manager version 2.58 Description: The issue arises from improper sanitization of input passed to the email parameter in a GET request. This can lead to the execution of arbitrary HTML code in a user's browser session,...

CVE-2020-21993: Improper Neutralization of Input During Web Page Generation

In WEMS Limited Enterprise Manager 2.58, input passed to the GET parameter 'email' is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site...