CVE-2020-10540

CVE-2020-10540 affects Untis WebUntis prior to version 2020.9.6 and is characterized by a CSRF vulnerability for certain combinations of rights and modules. The NVD records a CVSS v3.1 base score of 8.8 (HIGH) with NETWORK attack vector, LOW complexity, no privileges required, and user interactio...

CVE-2020-22453

Untis WebUntis before 2020.9.6 is affected by a Cross-Site Scripting (XSS) vulnerability in multiple functions that store information, arising from lack of proper validation of client-side data. This can allow execution of client-side code. The issue is addressed by upgrading to version 2020.9.6 ...