CVE-2022-28820

ACS Commons version 5.1.x and earlier suffers from a Reflected Cross-site Scripting XSS vulnerability in /apps/acs-commons/content/page-compare.html endpoint via the a and b GET parameters. User input submitted via these parameters is not validated or sanitised. An attacker must provide a link to...

CVE-2022-28820

ACS Commons version 5.1.x and earlier suffers from a Reflected Cross-site Scripting XSS vulnerability in /apps/acs-commons/content/page-compare.html endpoint via the a and b GET parameters. User input submitted via these parameters is not validated or sanitised. An attacker must provide a link to...

CVE-2022-28820: Improper Neutralization of Input During Web Page Generation

ACS Commons version 5.1.x and earlier suffers from a Reflected Cross-site Scripting XSS vulnerability in /apps/acs-commons/content/page-compare.html endpoint via the a and b GET parameters. User input submitted via these parameters is not validated or sanitised. An attacker must provide a link to...

PT-2022-19260

Name of the Vulnerable Software and Affected Versions ACS Commons versions 5.1.x and earlier Description The issue is a Reflected Cross-site Scripting XSS vulnerability in the "/apps/acs-commons/content/page-compare.html" endpoint via the a and b GET parameters. User input submitted via these...

PT-2022-16946

Name of the Vulnerable Software and Affected Versions ACS Commons versions 5.1.x and earlier Description The issue is related to a Reflected Cross-site Scripting XSS vulnerability in the "/apps/acs-commons/content/page-compare.html" endpoint via the a and b GET parameters. User input submitted vi...