CVE-2023-42240

An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /monitor/sscheduledfile.php...

CVE-2023-42245

CVE-2023-42245 affects Selesta Visual Access Manager versions prior to 4.42.2. The vulnerability is a Cross-Site Scripting (XSS) issue reachable via the monitor/s_scheduledfile.php endpoint. The available connected documents consistently identify the affected component and the vulnerable file pat...