MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter.
References
Link | Resource |
---|---|
https://github.com/RamonSilva20/mapos/issues/81 | Issue Tracking |
https://github.com/RamonSilva20/mapos/issues/81 | Issue Tracking |
Configurations
History
21 Nov 2024, 03:17
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/RamonSilva20/mapos/issues/81 - Issue Tracking |
Information
Published : 2017-11-21 08:29
Updated : 2025-04-20 01:37
NVD link : CVE-2017-16919
Mitre link : CVE-2017-16919
CVE.ORG link : CVE-2017-16919
JSON object : View
Products Affected
mapos_project
- mapos
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')