CVE-2018-6545

https://notcve.org/view.php?id=CVE-2018-6545

Ipswitch MoveIt v8.1 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability, as demonstrated by human.aspx. Attackers can leverage this vulnerability to send malicious messages to other users in order to steal session cookies and launch client-side attacks. Ipswitch MoveIt v8.1 es vulnerable a Cross-Site Scripting (XSS) persistente, tal y como queda demostrado con human.aspx. Los atacantes podrían aprovecharse de esta vulnerabilidad para enviar mensajes maliciosos a otros usuarios para robar las cookies de sesión y lanzar ataques del lado del cliente. • https://crowdshield.com/blog.php?name=ipswitch-moveit-stored-xss • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •