Passwork On-Premise Edition before 4.6.13 has multiple XSS issues.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://passwork.me | product vendor advisory |
https://gist.github.com/garakh/e0e2fe6d6e234f0595dea6a8141568f2 | third party advisory |