CVE-2017-6559: Improper Neutralization of Input During Web Page Generation

XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif=XSS attack...

PT-2017-17157

Name of the Vulnerable Software and Affected Versions Agora-Project version 3.2.2 Description The issue exists in the form of a cross-site scripting XSS attack. This attack can be executed through the index.php endpoint with specific parameters, including disconnect=1 and msgNotif containing...