Reflected Cross-Site Scripting (XSS) Vulnerabilities on Scriptcase apps

Scriptcase 9
,
#1

I scanned the scriptcase app with Qualys Scan (Vulnerability scan management) and I see Level 5 security vulnerability:
Reflected Cross-Site Scripting (XSS) Vulnerabilities

image
image1178×1410 196 KB

How to fix these Vulnerabilities?

#2

Hi
take a look to Setting HttpOnly in Cookies - Developers / Programming - Scriptcase

best regards.

#3

Thank you for the reply, yes I already have seen this before . All the options already the same as the Screenshot of that post. and configured the Apache servers as well

#4

Best way is to contact through the chat on the website about this, because I have no clue that any SC dev or representative will pick this post up and process.

#5

Could you share or sent me the detail of one of the those vulnerabilities
many times scans raise false positives to be checked manually

#6

They said it’s a known bug and they hopefully fix it in next versions which does not make sense at all. This is level 5 security issue

#7

Sure, here is one of them:

image
image2304×1636 509 KB