CVE-2017-16919

CVE-2017-16919 affects MapOS 3.1.11 and earlier. A stored XSS vulnerability exists in the /clientes/visualizar endpoint, exploitable via a crafted description parameter, allowing remote attackers to inject arbitrary web script or HTML. The connected documents confirm the vulnerability class and a...