|
worldlegacy
|
May 22, 2021 at 8:17 pm
Hi folks, our PCI security scan failed with the following error:
web program allows cross-site scripting in query string (/events/nc188-journey/)
We have four of these vulnerabilities, only for our currently open events.
Has anybody seen this? Any ideas for how to eliminate the vulnerability?
Thanks
|
|
Tony
|
May 25, 2021 at 2:55 pm
Hi there,
Do you have any further details on the vulnerabilities found?
If so you can add them here in a private reply, or preferably discuss this further via email using support[at]eventespresso.com
Note – if there is a vulnerability within EE’s code we aren’t trying to hide it with the above and will make it a priority to fix it, however, we will need some time to fix it before it’s publicly disclosed.
|
