CVE-2019-17432: Improper Neutralization of Input During Web Page Generation

An issue was discovered in fastadmin 1.0.0.20190705beta. There is a public/admin/general.config/edit CSRF vulnerability, as demonstrated by resultant XSS via the rowname parameter...

PT-2019-15153

Name of the Vulnerable Software and Affected Versions fastadmin version 1.0.0.20190705 beta Description An issue was discovered in fastadmin, where there is a public/admin/general.config/edit CSRF vulnerability. This can be exploited to achieve resultant XSS via the rowname parameter...