Cross site scripting

ServersCheck Monitoring Software before 14.2.3 is prone to a cross-site scripting vulnerability as user supplied-data is not validated/sanitized when passed in the settingsSMSALERTTYPE parameter, and JavaScript can be executed on settings-save.html the Settings - SMS Alerts page...

CVE-2017-17832: Improper Neutralization of Input During Web Page Generation

ServersCheck Monitoring Software before 14.2.3 is prone to a cross-site scripting vulnerability as user supplied-data is not validated/sanitized when passed in the settingsSMSALERTTYPE parameter, and JavaScript can be executed on settings-save.html the Settings - SMS Alerts page...

PT-2017-15037

Name of the Vulnerable Software and Affected Versions ServersCheck Monitoring Software versions prior to 14.2.3 Description The issue arises from the lack of validation and sanitization of user-supplied data passed in the settings SMS ALERT TYPE parameter. This allows JavaScript to be executed on...