3 matches found
CVE-2020-7809
ALSong 3.46 and earlier version contain a Document Object Model DOM based cross-site scripting vulnerability caused by improper validation of user input. A remote attacker could exploit this vulnerability by tricking the victim to open ALSong Albumsab file...
CVE-2020-7809: Improper Neutralization of Input During Web Page Generation
ALSong 3.46 and earlier version contain a Document Object Model DOM based cross-site scripting vulnerability caused by improper validation of user input. A remote attacker could exploit this vulnerability by tricking the victim to open ALSong Albumsab file...
PT-2020-19806
Name of the Vulnerable Software and Affected Versions ALSong versions 3.46 and earlier Description The issue is caused by improper validation of user input, leading to a Document Object Model DOM based cross-site scripting vulnerability. A remote attacker could exploit this by tricking the victim...