medium5.4
CVE-2017-16919
MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web s…
Impact
MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mapos Project | Mapos | through 3.1.11 |