Full title: Journyx 11.5.4 Cross Site Scripting Vulnerability Category: web applications Platform: python Journyx version 11.5.4 suffers from a cross site scripting vulnerability due to mishandling of the error_description during an active directory login flow. # 0day.today @ http://0day.today/