S-MADP Customer Support & Information Center

12 June 2023

08:20 PM BIBD Merchant Portal Bug #16601 (Resolved): [MW-1 & MW-4][BE] Stored Cross-Site Scripting (XSS)

requirement fixed to excluded <>"'= for username. userid BAU already excluded. It only allow alphanumeric only. See Pin Leng

12:32 PM BIBD Merchant Portal Bug #16601 (Resolved): [MW-1 & MW-4][BE] Stored Cross-Site Scripting (XSS)

Issue fixed as below:
1. URL cant display sensitive information like userid and username- fixed for user profile(Adm... See Pin Leng

12:22 PM BIBD Merchant Portal Bug #16604 (Resolved): [MW-10][BE] Sensitive Field Not Emptied

fixes already applied in MA. See Pin Leng

09 June 2023

10:06 AM BIBD Merchant Portal Bug #16604 (Resolved): [MW-10][BE] Sensitive Field Not Emptied

fixed done. See Pin Leng

06 June 2023

09:55 AM BIBD Merchant Portal Bug #16601 (Resolved): [MW-1 & MW-4][BE] Stored Cross-Site Scripting (XSS)

fixes done. See Pin Leng