Issue 278 | LigeroSmart up to 6.1.24 Environment Variable REQUEST_URI cross site scripting

A vulnerability has been found in LigeroSmart up to 6.1.24 and classified as problematic. This affects an unknown part of the component Environment Variable Handler. Performing manipulation of the argument REQUEST_URI results in cross site scripting.

The attack may be initiated remotely. In addition, an exploit is available.

The affected component should be upgraded.