Description
WebMO Job Manager 20.0 contains a cross-site scripting vulnerability in search parameters that allows remote attackers to inject malicious script code. Attackers can exploit the filterSearch and filterSearchType parameters to perform non-persistent attacks including session hijacking and external redirects.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WebMO | WebMO Job Manager | 20.0 | — |
References
- Vulnerability Lab Advisory exploit
- Product Homepage product
- VulnCheck Advisory: WebMO Job Manager 20.0 Cross-Site Scripting via Search Parameters third-party-advisory