In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login.

Published Jul 5, 2018 · Updated Aug 5, 2024 · Assigned by mitre