Cross-site scripting (XSS) vulnerability in login_reset_password_page.php in Tracking Requirements & Use Cases (TRUC) 0.11.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
| Software | From | Fixed in |
|---|---|---|
| jan_schutze / truc | 0.9.0 | 0.9.0.x |
| jan_schutze / truc | - | 0.11.0.x |
| jan_schutze / truc | 0.10.0 | 0.10.0.x |