Skip to content
OpenAdvisories

Product · SQLView

SQLView KRIS

1 known vulnerabilities.

1 result · Feed

  • Medium 6.8

    Stored Cross-Site Scripting in SQLView KRIS

    Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store m…