PT-2019-13499

Name of the Vulnerable Software and Affected Versions antSword versions prior to 2.1.0 Description The issue is related to self-XSS in the database configuration, which can lead to code execution. This is possible via files such as modules/database/asp/index.js, modules/database/custom/index.js,...

CVE-2019-13970: Improper Neutralization of Input During Web Page Generation

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js...