CVE-2018-20486

MetInfo 6.x through 6.1.3 has XSS via the /admin/login/logincheck.php urlarray parameter...

PT-2018-15408

Name of the Vulnerable Software and Affected Versions MetInfo versions 6.x through 6.1.3 Description The issue allows for XSS via the "/admin/login/login check.php" API endpoint, specifically through the url array parameter. Recommendations For MetInfo versions 6.x through 6.1.3, avoid using the...