| शीर्षक | OpenWGA OpenWGA Admin Client 7.11.12 (Build 737) Cross Site Scripting |
|---|
| विवरण | The OpenWGA Admin Client persists untrusted input in multiple administrator-facing fields without consistent, context-safe output encoding. When these values are later rendered in the Admin UI, stored JavaScript executes in the victim's browser. Impacted views include pages where saved names, titles, descriptions or other metadata are listed or previewed. This allows an attacker with low privileges to run arbitrary script in the context of a higher-privileged user's session. |
|---|
| स्रोत | ⚠️ https://github.com/mikecole-mg/security_findings/blob/main/openwga/openwga-xss.md |
|---|
| उपयोगकर्ता | mikecole-mg (UID 89343) |
|---|
| सबमिशन | 13/10/2025 12:55 AM (12 महीनों पहले) |
|---|
| संयम | 26/10/2025 06:29 AM (13 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 329922 [OpenWGA 7.11.12 Build 737 Admin UI क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|