Description
Ampache is a web based audio/video streaming application and file manager. Ampache has multiple reflective XSS vulnerabilities,this means that all forms in the Ampache that use `rule` as a variable are not secure. For example, when querying a song, when querying a podcast, we need to use `$rule` variable. This vulnerability is fixed in 6.3.1
Remediation
References
Related Vulnerabilities
WordPress Plugin Chat-Support Board-WordPress Chat Cross-Site Scripting (1.2.8)
WordPress Plugin Featured Content 'param' Parameter Cross-Site Scripting (0.0.1)
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-1551)
WordPress Plugin Form Builder-Create Responsive Contact Forms Cross-Site Scripting (1.9.8.4)
Internet Information Services Other Vulnerability (CVE-1999-1451)