Multiple XSS on API Manager 3.1.0

Cross-Site Scripting (XSS) vulnerability on WSO2 API Manager Product. By exploiting a Cross-site scripting vulnerability the attacker can hijack a logged-in user’s session by stealing cookies which means that a malicious hacker can change the logged-in user’s password and invalidate the session of the victim whilethe hacker maintains access. DETAILS:

Continue reading