Cross site scripting

Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio/consultarUsuario.jsf "Nome Completo" aka user fullname field...

CVE-2018-14924

Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio/consultarUsuario.jsf "Nome Completo" aka user fullname field...

CVE-2018-14924

CVE-2018-14924 affects Matera Banco 1.0.0. The connected sources describe a stored XSS in the application, exploitable via the sca/privilegio/consultarUsuario.jsf “Nome Completo” field. CNVD notes a remote attacker can inject arbitrary script/HTML, consistent with stored XSS. No patch/version rem...