Description
Two vulnerabilities exist in Sava's Link Manager, including SQL injection and cross-site scripting (XSS). Input parameters are not properly validated.
Impact
SQL injection allows attackers to extract and manipulate database contents. XSS enables session hijacking and credential theft from other users.
Solution
Apply input validation and parameterized queries. Use output encoding for all user-supplied data.