CVE-2021-31537

SIS SIS-REWE Go before 7.7 SP17 allows XSS: rewe/prod/web/index.php affected parameters are config, version, win, db, pwd, and user and /rewe/prod/web/rewegocheck.php version and all other parameters...

CVE-2021-31537

The CVE-2021-31537 issue affects SIS Informatik REWE GO prior to version 7.7 SP17, with a reflected XSS in rewe/prod/web/index.php (parameters: config, version, win, db, pwd, user) and rewe/prod/web/rewe_go_check.php (version and other parameters). Nuclei templates confirm the vulnerable paths an...