CVE-2019-14804

studio/polyglot.php?page=etemplates in UNA 10.0.0-RC1 allows XSS via the System Name field under Emails during template editing...

CVE-2019-14804: Improper Neutralization of Input During Web Page Generation

studio/polyglot.php?page=etemplates in UNA 10.0.0-RC1 allows XSS via the System Name field under Emails during template editing...

PT-2019-13847

Name of the Vulnerable Software and Affected Versions UNA version 10.0.0-RC1 Description The issue allows for XSS via the System Name field under Emails during template editing, specifically when accessing the 'studio/polyglot.php?page=etemplates' endpoint. Recommendations For UNA version...