Unscored CVE-2020-21147 EUVD-2020-13923GHSA-c7pv-p336-6hqg

RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious code to the adminis…

Published Jan 21, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious code to the administrator and execute JavaScript code, because webmain/flow/input/mode_emailmAction.php does not perform strict filtering.

References

https://github.com/alixiaowei/alixiaowei.github.io/issues/2
https://blog.csdn.net/adminxw/article/details/102881463