Details

      Description

      Reproduce:
      1, Sign in as admin
      2, use http://localhost:8080/group/control_panel/manage?p_p_id=177&p_p_lifecycle=0&p_p_state=maximized&p_p_mode=view&doAsGroupId=10180&refererPlid=10183&_177_chooseCallback=a;alert('xss');
      3, click on any of the links in the table
      4, javascript alert should appear

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              paul.piao Paul Piao (Inactive)
              Reporter:
              manuel.delapenya Manuel de la Peña (Inactive)
              Participants of an Issue:
              Recent user:
              Esther Sanz
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                9 years, 20 weeks, 4 days ago

                  Packages

                  Version Package
                  6.1.1 CE GA2
                  6.1.20 EE GA2
                  6.2.0 CE M2