Description
Unspecified vulnerability in Electronic Logbook (ELOG) before 2.7.2 has unknown impact and attack vectors when the "logbook contains HTML code," probably cross-site scripting (XSS).
References
- https://midas.psi.ch/elog/download/ChangeLog
- 41685 vdb-entry
- elog-logbook-xss(40124) vdb-entry
- 27526 vdb-entry