Description (CNA)
An issue was discovered in Quali CloudShell 9.3. An XSS vulnerability in the login page allows an attacker to craft a URL, with a constructor.constructor substring in the username field, that executes a payload when the user visits the /Account/Login page.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.quali.com/products/cloudshell-pro/
- https://burninatorsec.blogspot.com/2020/10/cve-2020-xxxxx-xss-in-quali-cloudshell.html
ADP enrichment
No English description supplied.