Description
Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2020-2757 Vulnerability (CVE-2020-2757)
WordPress Plugin Simple Slide Show TimThumb Arbitrary File Upload (1.0)
Oracle Database Server CVE-2012-0526 Vulnerability (CVE-2012-0526)
WordPress Plugin GD Star Rating 'votes' Parameter SQL Injection (1.9.8)
Jboss EAP Improper Input Validation Vulnerability (CVE-2018-1000873)