SABBATIC vulnerabilities

A Cross-Site Request Forgery (CSRF) vulnerability in the SABBATIC application allows an attacker to trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulnerable endpoint.

A Stored Cross-Site Scripting (XSS) vulnerability in the SABBATIC application allows an attacker to store JavaScript code that executes in the victim's browser when the page is viewed. The affected parameter is 'observaciones' in the /mis-gastos endpoint.

A Stored Cross-Site Scripting (XSS) vulnerability in the SABBATIC application allows an attacker to store JavaScript code that executes in the victim's browser when the page is viewed. The affected parameter is 'companyName' in the /empresa endpoint.

A Stored Cross-Site Scripting (XSS) vulnerability in the SABBATIC application allows an attacker to store JavaScript code that executes in the victim's browser when the page is viewed. The affected parameters are 'titulo_es' and 'add_etiquetas[]' in the /categorías endpoint.

A Stored Cross-Site Scripting (XSS) vulnerability in the SABBATIC application allows an attacker to store JavaScript code that executes in the victim's browser when the page is viewed. The affected parameter is 'nombre' in the /usuario endpoint.