Cross site scripting

2019-04-3019:29:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. Reflected XSS exists with an authenticated session via the Customerid, formName, FrameId, or MODE parameter.

CPENameOperatorVersion
intellect_core_bankingeq9.7.1

CPE	Name	Operator	Version
	intellect_core_banking	eq	9.7.1

References

neetech18.blogspot.com/2019/03/reflected-xss-vulnerability-in-polaris.html