2 matches found
CVE-2020-21147
RockOA V1.9.8 is affected by a cross-site scripting XSS vulnerability which allows remote attackers to send malicious code to the administrator and execute JavaScript code, because webmain/flow/input/modeemailmAction.php does not perform strict filtering...
4.8CVSS5AI score0.00807EPSS
SaveExploits1References2
CVE-2020-21147: Improper Neutralization of Input During Web Page Generation
RockOA V1.9.8 is affected by a cross-site scripting XSS vulnerability which allows remote attackers to send malicious code to the administrator and execute JavaScript code, because webmain/flow/input/modeemailmAction.php does not perform strict filtering...
4.8CVSS5.9AI score0.00807EPSS
SaveExploits1References2
20