CVE-2023-51067

An unauthenticated reflected cross-site scripting XSS vulnerability in QStar Archive Solutions Release RELEASE3-0 Build 7 allows attackers to execute arbitrary javascript on a victim's browser via a crafted link...

CVE-2023-51064

CVE-2023-51064 affects QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0. The qnme-ajax component’s tree_table endpoint (method=tree_table) is vulnerable to a DOM-based reflected XSS, enabling an attacker-controlled script to be executed in the victim’s browser as described across multiple sour...