PT-2014-2949

Name of the Vulnerable Software and Affected Versions SimpleRisk versions prior to 20130916-001 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the new project parameter in the management/prioritize planning.php file. Recommendations...

PT-2014-2948

Name of the Vulnerable Software and Affected Versions SimpleRisk versions prior to 20130916-001 Description A cross-site request forgery issue exists, allowing remote attackers to hijack user authentication for requests that add projects via an add project action in the management/prioritize...