Description (CNA)
Sandline Centraleyezer (On Premises) allows Stored XSS using HTML entities in the name field of the Category section.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://seclists.org/fulldisclosure/2019/Nov/8
- https://medium.com/insidersec0x42/centraleyezer-stored-xss-using-html-entities-cve-2019-12299-5c295ae54ef
ADP enrichment
No English description supplied.