3 matches found
PT-2021-16962
Name of the Vulnerable Software and Affected Versions LivingLogic XIST4C versions prior to 0.107.8 Description The issue allows for cross-site scripting XSS attacks. This can be achieved through specific pages such as "login.htm", "login.wihtm", or "login-form.htm". Recommendations For versions...
CVE-2021-26123: Improper Neutralization of Input During Web Page Generation
LivingLogic XIST4C before 0.107.8 allows XSS via login.htm, login.wihtm, or login-form.htm...
LivingLogic XIST4C Cross-Site Scripting Vulnerability
XIST4C is a content management system, shopping cart software and web application framework from LivingLogic. A cross-site scripting vulnerability exists in LivingLogic XIST4C versions prior to 0.107.8. The vulnerability can be exploited to conduct cross-site scripting attacks via login.htm,...