SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  Smartstore privatemessages Stored XSS 1

Category: WEB-ATTACKS      

An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/PrivateMessages/View.cshtml does not call HtmlUtils.SanitizeHtml on a private message.


Relevant Information