Skip to content
OpenAdvisories

Product · jokkedk

Webgrind

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    Webgrind 1.1 - Reflected Cross-Site Scripting (XSS) via file Parameter

    Webgrind 1.1 and before contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts via the file parameter in index.php. The application does not sufficiently encode user-controlled inputs, allowin…