NuytsTech Security

CVE-2020-24912

by ·

A reflected cross-site scripting (XSS) vulnerability in qcubed (all versions including 3.1.1) in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users.

Date published : 2021-03-04

http://seclists.org/fulldisclosure/2021/Mar/30

http://packetstormsecurity.com/files/161763/QCubed-3.1.1-Cross-Site-Scripting.html

Tags: