EUVD-2018-19784

Malware in sbrugna...

Code injection

The select component in bui through 2018-03-13 has XSS because it performs an escape operation on already-escaped text, as demonstrated by workGroupList text...

PT-2018-18437

Name of the Vulnerable Software and Affected Versions: bui through 2018-03-13 Description: The issue arises from the select component performing an escape operation on already-escaped text. This can lead to a cross-site scripting XSS attack, as demonstrated by the workGroupList text...

CVE-2018-8108: Improper Neutralization of Input During Web Page Generation

The select component in bui through 2018-03-13 has XSS because it performs an escape operation on already-escaped text, as demonstrated by workGroupList text...