Description
Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via persistent cross-site scripting
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Otalio | Ship Property Management System | < 2.22.0 | 2.22.0 |