SalonERP version 3.0.2 allows an external attacker to steal the cookie of arbitrary users. This is possible because the application does not correctly validate the page parameter against XSS attacks.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Fluid Attacks
Published: 2022-11-03T00:00:00
Updated: 2024-08-03T13:10:41.473Z
Reserved: 2022-10-10T00:00:00
Link: CVE-2022-42753
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-11-03T18:15:17.663
Modified: 2024-11-21T07:25:16.090
Link: CVE-2022-42753
Redhat
No data.