Wavelog cross-site scripting vulnerabilities

Wavelog is a web-based amateur radio logging software from the Wavelog open source. A cross-site scripting vulnerability exists in Wavelog 1.8.0 and earlier versions, which stems from the parameter manual in the file /qso that causes cross-site scripting...