Cross site scripting

A vulnerability classified as problematic has been found in Tongda OA 11.10. Affected is an unknown function of the file /general/ipanel/menucode.php?MENUTYPE=FAV. The manipulation of the argument OASUBWINDOW leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

CVE-2023-5026 Tongda OA cross site scripting

A vulnerability classified as problematic has been found in Tongda OA 11.10. Affected is an unknown function of the file /general/ipanel/menucode.php?MENUTYPE=FAV. The manipulation of the argument OASUBWINDOW leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

CVE-2023-5026

CVE-2023-5026 concerns Tongda OA 11.10, where an XSS vulnerability exists in an unknown function of the file /general/ipanel/menu_code.php?MENU_TYPE=FAV. The argument OA_SUB_WINDOW can be manipulated to trigger cross-site scripting, and the exploit has been disclosed publicly, enabling remote pot...