CVE-2020-20982

Cross Site Scripting XSS vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, via the backurl parameter to /php/passport/index.php...

CVE-2020-20982

Cross Site Scripting XSS vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, via the backurl parameter to /php/passport/index.php...

CVE-2020-20982

Cross Site Scripting XSS vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, via the backurl parameter to /php/passport/index.php...

Cross site scripting

Cross Site Scripting XSS vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, via the backurl parameter to /php/passport/index.php...

CVE-2020-20982

Cross Site Scripting XSS vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, via the backurl parameter to /php/passport/index.php...

CVE-2020-20982

CVE-2020-20982 affects shadoweb wdja v1.5.1. The vulnerability is a Cross-Site Scripting (XSS) flaw in the backurl handling of /php/passport/index.php , potentially allowing an attacker to execute arbitrary scripts in the victim’s browser and escalate privileges within the user context. Affected ...

PT-2021-10567

Name of the Vulnerable Software and Affected Versions: shadoweb wdja version 1.5.1 Description: A Cross Site Scripting XSS issue allows attackers to execute arbitrary code and gain escalated privileges via the backurl parameter to the "/php/passport/index.php" endpoint. Recommendations: For...

CVE-2020-20982: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, via the backurl parameter to /php/passport/index.php...