| शीर्षक | Ingenico The estate manager 2023 Cross Site Scripting |
|---|
| विवरण | While evaluating Ingenico Estate Manager during a customer engagement. A stored cross-site scripting (XSS) vulnerability has been discovered in the news feed feature, which is managed by an administrator account. The vulnerability is in the href attribute of a link when a new message is posted. An attacker can use this vulnerability to inject malicious Javascript code in the context of a victim's browser, which can be triggered by clicking on the link. |
|---|
| स्रोत | ⚠️ https://gentle-khaan-c53.notion.site/Stored-XSS-in-Ingenico-The-Estate-Manager-90089eaef5574b929fe019c3d0686b63 |
|---|
| उपयोगकर्ता | Farouk (UID 69824) |
|---|
| सबमिशन | 09/06/2024 11:30 PM (2 साल पहले) |
|---|
| संयम | 17/06/2024 03:19 PM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 268787 [Ingenico Estate Manager 2023 News Feed /emgui/rest/ums/messages message क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 17 |
|---|