4 matches found
CVE-2021-40875
Improper Access Control in Gurock TestRail versions
CVE-2021-44263
Gurock TestRail before 7.2.4 mishandles HTML escaping.
CVE-2014-4857
Cross-site scripting (XSS) vulnerability in Gurock TestRail before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Created By field in a project activity.
CVE-2021-36538
Cross Site Scripting (XSS) vulnerability in Gurock TestRail before 7.1.2 allows remote authenticated attackers to run arbitrary code via the reference field in milestones or description fields in reports.