medium6.1
CVE-2022-39054
Cowell enterprise travel management system has insufficient filtering for special characters within web URL.
Impact
Cowell enterprise travel management system has insufficient filtering for special characters within web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cowell Enterprise Travel Management System Project | Cowell Enterprise Travel Management System | All versions |