Kriti Gupta created OPENMEETINGS-944:
----------------------------------------
Summary: DOM XSS vulnerablity
Key: OPENMEETINGS-944
URL: https://issues.apache.org/jira/browse/OPENMEETINGS-944
Project: Openmeetings
Issue Type: Test
Affects Versions: 3.0.0, 3.1.0
Environment: Windows 8
Reporter: Kriti Gupta
Priority: Critical
Fix For: 3.1.0
Cross-site scripting (XSS) vulnerabilities :
1. Data enters web application through an untrusted source
In this case the data enters at in BrowseAccount.jsp at line 35.
2. The data is included in dynamic content that is sent to a web user without
being validated for malicious code.
In this case the data is sent at in BrowseAccount.jsp at line 35.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
