2 matches found
CVE-2020-10540
Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules.
CVE-2020-22453
Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information.