PT-2018-12662

Name of the Vulnerable Software and Affected Versions Subsonic version 6.1.1 Description An issue was discovered that affects the transcoding settings, where five stored cross-site scripting vulnerabilities exist in the namex, sourceformatsx, targetFormatx, step1x, and step2x parameters. These...

CVE-2018-14689: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Subsonic 6.1.1. The transcoding settings are affected by five stored cross-site scripting vulnerabilities in the namex, sourceformatsx, targetFormatx, step1x, and step2x parameters where x is an integer to transcodingSettings.view that could be used to steal session...