Redwood: >> Report2web Security Vulnerabilities
A cross-site scripting (XSS) issue in the login panel in Redwood Report2Web 4.3.4.5 and 4.5.3 allows remote attackers to inject JavaScript via the signIn.do urll parameter.
CVSS Score
6.1
EPSS Score
0.216
Published
2021-02-05
A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/Online_Help/NetHelp/default.htm turl parameter.
CVSS Score
5.3
EPSS Score
0.003
Published
2021-02-05