ElkarBackup Cross-Site Scripting Vulnerability

ElkarBackup is a free open source backup solution based on RSync/RSnapshot. A persistent cross-site scripting vulnerability exists in the Policies action Name parameter in ElkarBackup 1.3.3. An attacker can exploit this vulnerability to steal user session cookies...