Description
Cowell enterprise travel management system has insufficient filtering for special characters within web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| COWELL INFORMATION SYSTEM | enterprise travel management system | — | — |