CVE-2023-6275

TOTVS Fluig Platform (versions 1.6.x–1.8.1) is affected by a Cross-Site Scripting in the mobileredir/openApp.jsp component. The vulnerability arises from manipulating the redirectUrl/user parameters, e.g. redirectUrl/user with payloads like >, enabling reflected XSS. The issue may be exploited...