medium5.4
CVE-2020-28047
AudimexEE before 14.1.1 is vulnerable to Reflected XSS (Cross-Site-Scripting).
Impact
AudimexEE before 14.1.1 is vulnerable to Reflected XSS (Cross-Site-Scripting). If the recommended security configuration parameter "unique_error_numbers" is not set, remote attackers can inject arbitrary web script or HTML via 'action, cargo, panel' parameters that can lead to data leakage.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Web-Audimex | Audimexee | before 14.1.1 |