CVE-2019-14427
CVE-2019-14427 describes an XSS vulnerability in WEB STUDIO Ultimate Loan Manager 2.0. The issue arises when an attacker injects crafted JavaScript by setting the notes parameter via the Branches workflow (branch/store, as noted in multiple sources). The vulnerability supports at least a persiste...