Vendor
SQLView
1 known vulnerabilities.
Products
1 result · Feed
-
Medium 6.8
Stored Cross-Site Scripting in SQLView KRIS
Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store m…