PT-2019-18384

Name of the Vulnerable Software and Affected Versions i-doit Open version 1.12 Description A cross-site scripting XSS issue was found. The issue is related to the src/tools/php/qr/qr.php API endpoint and the url parameter. Recommendations For i-doit Open version 1.12, consider restricting access ...

CVE-2019-6965: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter...