Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
PleskWin Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2019-18793 - Vulnerability Database
PleskWin

PleskWin Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2019-18793

Medium
Reference: CVE-2019-18793
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-18793
Title: PleskWin Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Overview:

Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm via the quotfileNamequot parameter.