2 matches found
Cross site scripting
ServersCheck Monitoring Software before 14.2.3 is prone to a cross-site scripting vulnerability as user supplied-data is not validated/sanitized when passed in the settingsSMSALERTTYPE parameter, and JavaScript can be executed on settings-save.html the Settings - SMS Alerts page...
3.5CVSS5.2AI score0.00707EPSS
SaveExploits2References2Affected Software1
CVE-2017-17832: Improper Neutralization of Input During Web Page Generation
ServersCheck Monitoring Software before 14.2.3 is prone to a cross-site scripting vulnerability as user supplied-data is not validated/sanitized when passed in the settingsSMSALERTTYPE parameter, and JavaScript can be executed on settings-save.html the Settings - SMS Alerts page...
5.4CVSS5.8AI score0.00707EPSS
SaveExploits2References2
20