CVE-2019-8391

Description

qdPM 9.1 suffers from Cross-site Scripting (XSS) via configuration?type=[XSS] parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• http://packetstormsecurity.com/files/151723/qdPM-9.1-Cross-Site-Scripting.html ↗
• https://www.exploit-db.com/exploits/46398/ ↗
• http://sourceforge.net/projects/qdpm ↗
• http://qdpm.net/download-qdpm-free-project-management ↗