PT-2022-10307

Name of the Vulnerable Software and Affected Versions spotweb version 1.4.9 Description The issue allows authenticated attackers to execute arbitrary code via a crafted GET request to the "login page" API endpoint. This is a cross-site scripting XSS issue, which means attackers can inject malicio...