5 matches found
CVE-2019-20008
In Archery before 1.3, inserting an XSS payload into a project name either by creating a new project or editing an existing one will result in stored XSS on the vulnerability-scan scheduling page...
EUVD-2019-0105
Malware in sbrugna...
Cross site scripting
In Archery before 1.3, inserting an XSS payload into a project name either by creating a new project or editing an existing one will result in stored XSS on the vulnerability-scan scheduling page...
CVE-2019-20008: Improper Neutralization of Input During Web Page Generation
In Archery before 1.3, inserting an XSS payload into a project name either by creating a new project or editing an existing one will result in stored XSS on the vulnerability-scan scheduling page...
PT-2019-16042
Name of the Vulnerable Software and Affected Versions Archery versions prior to 1.3 Description The issue allows for stored XSS on the vulnerability-scan scheduling page when an XSS payload is inserted into a project name. This can occur either by creating a new project or editing an existing one...