PT-2022-12452

Name of the Vulnerable Software and Affected Versions PONTON X/P Messenger versions prior to 3.11.2 Description An issue was discovered in several functions, which are vulnerable to reflected XSS. This is demonstrated by various API endpoints, such as...

CVE-2021-45889: Improper Neutralization of Input During Web Page Generation

An issue was discovered in PONTON X/P Messenger before 3.11.2. Several functions are vulnerable to reflected XSS, as demonstrated by private/index.jsp?partners/ShowNonLocalPartners.do?localID= or private/index.jsp or private/index.jsp?database/databaseTab.jsp or...