CVE-2019-13965

Because of a lack of sanitization around error messages, multiple Reflective XSS issues exist in iTop through 2.6.0 via the paramfile parameter to webservices/export.php, webservices/cron.php, or env-production/itop-backup/backup.php. By default, any XSS sent to the administrator can be transform...

CVE-2019-13965: Improper Neutralization of Input During Web Page Generation

Because of a lack of sanitization around error messages, multiple Reflective XSS issues exist in iTop through 2.6.0 via the paramfile parameter to webservices/export.php, webservices/cron.php, or env-production/itop-backup/backup.php. By default, any XSS sent to the administrator can be transform...

PT-2020-9417

Name of the Vulnerable Software and Affected Versions: iTop versions prior to 2.6.1 Description: The issue is related to a lack of sanitization around error messages, leading to multiple Reflective XSS issues. These issues exist in various PHP files, including webservices/export.php,...