Crk Business Platform vulnerabilities

• crk business platform CRK Business Platform <= 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', ... CVE-2020-13969 6.1 MediumDecember 23, 2020
• crk business platform CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using... CVE-2020-13968 9.8 CriticalDecember 23, 2020