CVE-2020-23041

CVE-2020-23041 affects Dropouts Technologies LLP Air Share v1.2. The Red Hat/NVD entries and related documents confirm a cross-site scripting (XSS) vulnerability in the path parameter used by the list and download exception-handling. The underlying cause is unsanitized or improperly validated inp...

CVE-2020-36489

CVE-2020-36489 corresponds to a cross-site scripting (XSS) flaw in the devicename parameter of Dropouts Technologies LLP Air Share v1.2. Multiple connected sources confirm the vulnerable component and root cause: inadequate input handling/escaping in the devicename field allows arbitrary web scri...