Iakgtv

Name of the Vulnerable Software and Affected Versions: thinkgem JeeSite version 5.3 Description: A problem was found in the processing of the file /js/a/login of the component Cookie Handler. The manipulation of the argument `skinName` leads to cross site scripting. The attack may be initiated remotely. Recommendations: For thinkgem JeeSite version 5.3, as a temporary workaround, consider restricting access to the `/js/a/login` endpoint until a patch is available. Avoid using the `skinName` argument in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.