Cross site scripting

Multiple Cross-Site Scripting XSS were discovered in 'openeclass Release3.5.4'. The vulnerabilities exist due to insufficient filtration of user-supplied data meetingid, user passed to the 'openeclass-master/modules/tc/webconf/webconf.php' URL. An attacker could execute arbitrary HTML and script...

CVE-2017-7389

Multiple Cross-Site Scripting XSS were discovered in 'openeclass Release3.5.4'. The vulnerabilities exist due to insufficient filtration of user-supplied data meetingid, user passed to the 'openeclass-master/modules/tc/webconf/webconf.php' URL. An attacker could execute arbitrary HTML and script...

PT-2017-17699

Name of the Vulnerable Software and Affected Versions openeclass version Release 3.5.4 Description The issue is related to insufficient filtration of user-supplied data, specifically the meeting id and user variables, which are passed to the "openeclass-master/modules/tc/webconf/webconf.php" URL...

CVE-2017-7389: Improper Neutralization of Input During Web Page Generation

Multiple Cross-Site Scripting XSS were discovered in 'openeclass Release3.5.4'. The vulnerabilities exist due to insufficient filtration of user-supplied data meetingid, user passed to the 'openeclass-master/modules/tc/webconf/webconf.php' URL. An attacker could execute arbitrary HTML and script...