EUVD-2020-20811

Malware in sbrugna...

CVE-2020-28350

A Cross Site Scripting XSS vulnerability exists in OPAC in Sokrates SOWA SowaSQL through 5.6.1 via the sowacgi.php typ parameter...

CVE-2020-28350

The CVE-2020-28350 describes a Cross-Site Scripting (XSS) vulnerability in the OPAC component of Sokrates SOWA SowaSQL, triggered via the sowacgi.php typ parameter and affecting versions up to 5.6.1. The root cause is inadequate sanitization of HTML characters in the typ parameter, enabling injec...