medium6.1
CVE-2018-20302
Cross-site Scripting in xain
Impact
XSS is possible via the use of the order query parameter. An example request would look like: ``` http://host/ressources?order=%27><script>alert(1);</script> ```
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| erlang | xain | < 0.6.2 | 0.6.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emetrotel | Xain | before 0.6.2 |