Tickets :: Comment on [#12803] CSRF and XSS in in Save search as a virtual address book

* Your Email Address
* Spam protection	Enter the letters below: .__ \ /. .. ..___ [__) >< \|\ \|\|\ \|[__ [__)/ \\| \\|\| \\|\|
Comment	> CSRF and XSS were found in the "Save Search as a virtual address > book" functionality. A malicious attacker could launch a CSRF attack > and makes the user to save a malicious code into the "save > search".This functionality was found to miss the user's input > sanitisation, making it vulnerable to XSS. > > So in order to exploit the XSS, a CSRF has to be launched before.
Attachment
Watch this ticket