CVE-2019-12453

Published July 19th, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

1

PROJECT

Description

In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation.

undefinedmode/CVE-2019-12453

Authenticated XSS in Microstrategy Web - Versions prior to 10.1 patch 10

GitHub