PT-2019-13500

Name of the Vulnerable Software and Affected Versions OTCMS version 3.81 Description The issue allows for XSS via the mode parameter in an "apiRun.php?mudi=autoRun" request. Recommendations For OTCMS version 3.81, avoid using the mode parameter in the "apiRun.php?mudi=autoRun" request until the...

CVE-2019-13971: Improper Neutralization of Input During Web Page Generation

OTCMS 3.81 allows XSS via the mode parameter in an apiRun.php?mudi=autoRun request...