vendor:
WebTareas
by:
Hubert Wojciechowski
8.8
CVSS
HIGH
Reflected XSS
79
CWE
Product Name: WebTareas
Affected Version From: 2.4
Affected Version To: 2.4
Patch Exists: NO
Related CWE:
CPE: a:webtareas:webtareas:2.4
Platforms Tested: Windows 10
2022
WebTareas 2.4 – Reflected XSS (Unauthorised)
A reflected XSS vulnerability exists in WebTareas 2.4, which allows an unauthorised user to inject malicious JavaScript code into the application. The vulnerability is triggered when a maliciously crafted URL is sent to the application, which is then reflected back to the user. The malicious code is executed in the user's browser, allowing the attacker to gain access to sensitive information or perform other malicious actions.
Mitigation:
Input validation should be used to prevent malicious code from being injected into the application. Additionally, the application should be configured to use a Content Security Policy (CSP) to prevent malicious code from being executed.
