CVE-2023-38878

DevCode OpenSTAManager is affected by a reflected XSS in versions 2.4.24–2.4.47. The vulnerability arises from injecting malicious payloads into the error and error_description parameters of oauth2.php, allowing a remote attacker to execute JavaScript in a victim’s browser. Public documents do no...