CVE-2018-9147

Gespage software, version 7.5.7, is affected by a cross-site scripting (XSS) vulnerability. The issue allows a remote attacker to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/user_reg.jsp. The available sources describe the vulnerability but d...

CVE-2018-9147: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/userreg.jsp...

PT-2018-18887

Name of the Vulnerable Software and Affected Versions Gespage version 7.5.7 Description The issue allows remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to the "webapp/users/user reg.jsp" API endpoint. This can lead to cross-site scripting XS...