CVE-2022-3804

The CVE-2022-3804 affects eolinker apinto-dashboard, specifically the /login login path where the callback argument is manipulated to trigger cross-site scripting (XSS). Reported as exploitable remotely, the vulnerability’s root cause is an XSS in the handling of the callback parameter. Affected ...