CVE-2021-27950

CVE-2021-27950 affects Sita AzurCMS (AzurWebEngine/eShop)

CVE-2021-28901

SITA Software Azur CMS (variant: 1.2.3.1 and earlier) exposes multiple cross-site scripting (XSS) vulnerabilities. The issue stems from insufficient validation/filtering of input parameters, allowing remote attackers to inject arbitrary script/HTML via: NOM_CLI, ADRESSE, ADRESSE2, LOCALITE to /es...