PT-2018-18887

Name of the Vulnerable Software and Affected Versions Gespage version 7.5.7 Description The issue allows remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to the "webapp/users/user reg.jsp" API endpoint. This can lead to cross-site scripting XS...

PT-2018-8434

Name of the Vulnerable Software and Affected Versions Gespage versions prior to 7.4.9 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the printer name when adding a printer in the admin panel or the username parameter to...