CVE-2018-19924
06.12.2018, 23:29
An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. An email address can be modified in between the request for a validation code and the entry of the validation code, leading to storage of an XSS payload contained in the modified address.
| Vendor | Product | Version |
|---|---|---|
| sales_\&_company_management_system_project | sales_\&_company_management_system | 𝑥 ≤ 2018-12-05 |
𝑥
= Vulnerable software versions