BBMRI-ERIC Negotiator Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in BBMRI-ERIC Negotiator version 3.15.2. This issue arises from inadequate validation of user input, allowing remote users to send specially crafted POST requests that can be executed by authenticated users. As a result, an attacker could potentially steal session cookie details from the targeted user.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Remediation

Users can upgrade to BBMRI-ERIC Negotiator version 3.15.5 to address this vulnerability.