EUVD-2020-19418

Malware in sbrugna...

CVE-2020-26885: Improper Neutralization of Input During Web Page Generation

An issue was discovered in 2sic 2sxc before 11.22. A XSS vulnerability in the sxcver parameter of dnn/ui.html allows an attacker to craft a malicious URL that executes a JavaScript payload in a victim's browser...

2sic 2sxc 跨站脚本漏洞

2sic 2sxc is a software package that can be used for almost any type of content management need or application development need. A cross-site scripting vulnerability exists in 2sic 2sxc prior to version 11.22, which stems from an XSS vulnerability in the "sxcver" parameter of "dnn/ui.html", which...