Description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bifra Engineering Consulting Ltd. Q-smart NexT Poll allows Stored XSS.
This issue affects Q-smart NexT Poll: before 1.8.7.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Bifra Engineering Consulting | Q-smart NexT Poll | < 1.8.7 | 1.8.7 |
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0583 government-resource