CVE-2018-14688: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Subsonic 6.1.1. The radio settings are affected by three stored cross-site scripting vulnerabilities in the namex, streamUrlx, homepageUrlx parameters where x is an integer to internetRadioSettings.view that could be used to steal session information of a victim...

PT-2018-12661

Name of the Vulnerable Software and Affected Versions Subsonic version 6.1.1 Description An issue was discovered that affects the radio settings, involving three stored cross-site scripting vulnerabilities. The vulnerabilities are in the namex, streamUrlx, homepageUrlx parameters, where x is an...