Description
Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceAvatars) allows Cross-Site Scripting (XSS).
This issue affects BlueSpice: from 5 through 5.1.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hallo Welt! | BlueSpice | 5 – ≤ 5.1.1 | — |