CVE-2020-21147

RockOA V1.9.8 is affected by a cross-site scripting XSS vulnerability which allows remote attackers to send malicious code to the administrator and execute JavaScript code, because webmain/flow/input/modeemailmAction.php does not perform strict filtering...

CVE-2020-21147

CVE-2020-21147 affects RockOA V1.9.8 with a cross-site scripting (XSS) vulnerability in webmain/flow/input/mode_emailmAction.php due to insufficient input filtering. This could allow remote attackers to deliver malicious code that executes in an administrator’s browser. The connected sources conf...