Loading product vulnerabilities…
Total
3
Critical
0
High
0
Medium
0
CISA KEV
0
QPR Portal before 2012.2.1 allows remote attackers to modify or delete notes via a direct request.
Cross-site scripting (XSS) vulnerability in QPR Portal 2014.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the RID parameter.
Multiple cross-site scripting (XSS) vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body field.