medium4.8
CVE-2018-9036
CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users.
Impact
CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Checksec | Canopy | from 3.0.0 through 3.0.6 |