CVE-2017-15214: Improper Neutralization of Input During Web Page Generation

Stored XSS vulnerability in Flyspray 1.0-rc4 before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges and also to execute JavaScript against other users including unauthenticated users, via the name, title, or id parameter to...

CVE-2017-15214

Stored XSS vulnerability in Flyspray 1.0-rc4 before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges and also to execute JavaScript against other users including unauthenticated users, via the name, title, or id parameter to...

PT-2017-13909

Name of the Vulnerable Software and Affected Versions Flyspray versions 1.0-rc4 through 1.0-rc5 Description The issue allows an authenticated user to inject JavaScript, potentially gaining administrator privileges and executing JavaScript against other users, including unauthenticated ones. This ...