PleskLin Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2019-18793 - Vulnerability Database

PleskLin Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2019-18793

Medium

Reference: CVE-2019-18793

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-18793

Title: PleskLin Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm via the quotfileNamequot parameter.